Authentication

GEP REST API & Bulk API secure HTTP endpoints are accessible using JWT.  Clients need to generate the JWT token as mentioned below and send it along with the request in the header as a Bearer token.

 

1.    A unique identifier will be generated for each customer.
2.    Each customer will be provided with a unique identifier. Customers will have to send a client certificate along with unique identifier as part of request to generate JWT.
3.    Each customer will be given separate Token Service URL to create JWT.
4.    Each Token Service URL will have an associated policy.
5.    Customer certificate can also be used instead of GEP certificate for authentication. Additionally, IP address restriction can also be supported.

 

Request

Verb: GET 
URL: https://smartuatstp.gep.com/SmartAuth2/Token

 

Header:

  • Ocp-Apim-Subscription-key
  • gep-auth-key

 

Body: NA

 

Response

 

AttributeDescription
ExpiresExpiry time in minutes
TokenJWT Token
StatusCodeStatus code for the response
ErrorMessageReason for the error, if any.

 

Sample Response
{
    "expires": 120,
    "token": "your-jwt-token",
    "statusCode": 200,
    "errorMessage": ""
}

 

Status CodeDescription
200OK
403Forbidden
500Internal Server Error