JWT

JSON Web Tokens (JWT) is a compact and self-contained authentication method that allows information to be securely transmitted between parties as a JSON object.

Leveraging cryptographic signatures, JWT ensures the integrity and authenticity of data, making it a powerful choice for web and mobile applications.

Experience the speed and efficiency of stateless authentication, where every interaction becomes a breeze, and users can seamlessly access resources without repetitive logins.

Set Up JWT

Requests made to the Ideanote API need to include a token.

1. In your Workspace navigate to the Settings then Authentication
2. Click Add and chose JWT
3. Go through the Setup Dialog that appears

JWT data fields

Ideanote expects the structure of the JWT payload to match the following:

1. ‍name: full name of the user (optional)‍
2. avatarUrl: an URL to the avatar of the user (optional)‍
3. sub: user ID in your system‍
4. email: email of the user‍
5. locale: locale of the user‍
6. subdomain: the subdomain of your Ideanote workspace‍
7. department: The department the user works in (we think this is found on a user property called "User Site" in the data you generate the JWT from).‍
8. country: The country the user works in (we think this is found on a user property called "User Country" in the data you generate the JWT from.

Each of your workspaces are preconfigured with a shared JWT secret that can be provided to you upon request. You will need to sign the JWTs with the secret corresponding to the relevant workspace.

Authorization header

To authenticate API calls, provide the signed JWT using the Authorization header as such:

Authorization: Bearer <JWT>