Authentication

The Sales Tracker API uses Bearer token authentication. All requests to the API endpoints must include a valid Bearer token in the Authorization header. For example:

Authorization: Bearer YourSecretToken

How It Works

• Token Validation: The API validates the token against a predefined list of valid tokens (or a token store, if implemented in production). If the token is missing, invalid, or expired, the API returns a 401 Unauthorized error.

• Implementation: The authentication logic is centralized in an authentication.php file which is included at the beginning of each endpoint. This ensures that every request is checked before any further processing.

• Usage Example: When making a request, your HTTP headers should include:

  GET /event/123 HTTP/1.1
  Host: api.ticksights.com
  Authorization: Bearer YourSecretToken

Using HTTPS is strongly recommended to protect the token during transmission.