Authentication

SKOR uses one token endpoint, Generate Access Token, for the Modular API and Property Management API.

Generate an access token

Exchange your client_id and client_secret for a one-hour bearer token.

Your integration receives a client_id and client_secret.

Send client_id as the HTTP Basic Auth username and client_secret as the HTTP Basic Auth password:

curl --request POST \
  --user 'cid_example:cs_example' \
  'https://api.skortorent.com/api/v1/authenticate/token'

curl --request POST \
  --user 'cid_example:cs_example' \
  'https://dev-api.skortorent.com/api/v1/authenticate/token'

Do not send credentials in a JSON body. The returned token expires after one hour.

Pass the token to protected endpoints:

Authorization: Bearer <token>

Treat the token as a secret. Do not expose it in client-side code, logs, or public repositories.

Need credentials or help with authentication? Contact info@skortorent.com.