Authentication

Authentication is the act of proving who you are.

In Money Toolkit this is simply giving us the correct user name and password.

Remember this is a read only API, so we dont feel our authentication has to ba any more complex than that.

An Authentication via the public api is simply a POST request much like from a web page's form.

Once successfully authenticated the json response will return a per session token (which will be set in the set-cookie header as well)

You need to keep this token and include it in subsequent request to the API.

Authenticate

passing a recognised username and password returns a message relating to the apropriate status code and a maximum of 30 minute token (or until memcache gets flushed)

url

https://www.moneytoolkit.com/pub/authenticate

method

POST

headers

Content-Type: application/x-www-form-urlencoded

params/body

u=danm&p=pass

response

###Codes

• 200 - A successful authentication.
• 401 - Any failure, no password, wrong password etc returns Unauthorized

###Body A successful auth the body returns a token in json and the message WILL be 'authenticated'...

{"message": "authenticated", "token": "danmeWyPfuPj"}

Or in case of 401's some other message:

{"message": "authentication failed - no user"}