Get access token

The access token is used to authenticate with the ZapSign API. It is associated with your user and the organization specified when generating the token, and it expires after 1 hour.

To obtain the Access Token, make a request to the authentication endpoint with your ZapSign user credentials. This endpoint will return both the Access Token and the Refresh Token.

POST https://api.zapsign.com.br/api/v1/auth/token/{{organization_ID}}/

You can obtain your organization ID by navigating to Settings > Integrations > API Token > Organization ID.

Request body
{
    "username": "[e-mail]",
    "password": "StrongPassword123"
}

200: OK Authentication successfully completed.

{
    "refresh": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0b2tlbl90eXBlIjoicmVmcmVzaCIsImV4cCI6MTcxMDE3ODM0NCwianRpIjoiYjhmZjMwNDJmNjRkNDJmM2FlMzczZmRiNDQ3YTQ2NGEiLCJ1c2Vyb",
    "access": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
}

401: Unauthorized Invalid credentials

{
    "detail": "No active account found with the given credentials"
}

400: Bad Request Login attempts exceeded.

{
    "message": "Rate limit exceeded"
}

After obtaining your Token, you can authenticate to the ZapSign endpoints by including your token in the "Authorization" header of your request, using the prefix "Bearer". Example:

  'headers': {
    'Content-Type': 'application/json',
    'Authorization': 'Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwiZXhwIjoxNzA5ODIwMTQxLCJqdGkiOiIxMGM4YmVhOTkxNDM0ZGU5OWQxNmViMGE2ZTA3MTU1YyIsInVzZXJfaWQiOjEsInR5cGUiOiJwdWJsaWMifQ.GhMKXDyiidHrWCSmU3I9e6-zDm61mBmDqEavir4IW0c'
  },

After one hour, you will need to authenticate again. See how to do this in the chapter "Refresh Your Access Token".