Authenticate: you have to authenticate so the app knows who you are.
User Name and Password
Getting a Token (JWT)
Token:
Tokens are immutable, unchangeable
You get 1 token per org.
Tokens work in one organization only
If you want to switch organizations you need to get a new token.
Refresh Token is used to get new tokens
To switch orgs
To refresh an expired token
You can use your refresh token as long as you need to unless you change a security parameter, password or email address, or sign out.
Post /api/account/login:
Username
Password
Remember: null
OrgId: Null
Token: 1
Returns a Token
For Swagger we need to Authorize
Bearer and paste token between the ββ