To use Teamwork Cloud REST API with personal access token authentication

  1. Generate your personal access token.

  2. Copy the token and use it in the HTTP header attribute to perform REST API calls.

    The token is used in an Authorization header with the Token Type.

HTTP header attribute example

Authorization: Token
eyJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJBZG1pbmlzdHJhdG9yIiwiYXVkIjoidHdjLXJlc3QtYXBp
IiwiaXNzIjoiaHR0cHM6XC9cLzEyNy4wLjAuMTo4NTU1XC9hdXRoZW50aWNhdGlvbiIsImV4cCI6M
TYwNjI5OTc3NywiaWF0IjoxNjA2Mjk4ODc3fQ.bA-
S5hHeSlV8AFoQVzzfIseC3qlmqQoBQREiapHN6I5CcvwetKdSVztWKkssSGjm31Y1zqoULio7_1Ma
mtGBbbzvA1WWQYFRiYk0D612yNDv4uNHBbNLNEv61TYNLwdPwPh0atVRehkh-
LSgjipXTvXj4mZViE0NHKIG9U7htA9Zzvxvck2JDXe_eU2-
4TCNm8II89ROaEb1tZ5nD84ieRbzJWqrcVTdqU2YfbIUeew5Nir8obkLYgixBXFKWsTHi3jNuoBx3
KcAIyZqL6cjtsCER4wbk4PEEDC57UVsOcsXWr6yvXIoVdJMOiDHo_fJMkgOjDqSyIL-2B21O-Y-GA
TEXT

Token expiration and validation

The personal access token does not have an expiration date, so use it with caution and ensure it is adequately protected.

To invalidate the personal access token, delete it in the My account application.

The personal access token should be regenerated after the SSL certificate is updated for Web Application Platform. This is because the authentication server uses the certificate for personal access token signing and later for token signature validation.