Authenticate Using Postman

Starting from Midaz v1.49, authentication is no longer required in the Community version. You can make requests to the Midaz APIs directly.

However, if you are using an older version of Midaz, you can follow these steps to authenticate:

1. Ensure that the Midaz container is up on Docker.
2. From the main Midaz page in Postman, go to the "Authorization" tab.
3. On the Authorization tab, scroll all the way down and click the "Get New Access Token" button (figure 1).

3. A window will open for you to log in using the credentials of one of the users available.
4. Once the token is created, a success message will be displayed.
   1. Click on the "Proceed" button to continue or wait for the message to close.
5. The "Manage Acess Tokens" window will open.
6. From there, click the "Use Token" button.
7. The generated token will be stored in the Current Token section of the Midaz overview page, and you can select it for future use. The token expiration date will also be displayed (figure 2).

8. Send a request to one of the endpoints in the collection to save the token to the "access_token" environment variable, which will be used in the endpoint call.
   1. The response may display an error, but that is expected as its purpose is to save the token.
9. Once saved, the token will be available to use in subsequent requests.

For a walkthrough, watch our video tutorial.

Verifying Token Authenticity

To verify the authenticity of a token, follow these steps:

1. Ensure the authentication module is running (follow the setup guide on the Midaz Setup page if needed).
2. Open the Postman collection.
3. Send a request to the Verify Token endpoint.
4. Populate the "access_token" environment variable with the token to be verified.
5. The response will include a field named active, which indicates whether the token is valid or expired.