Skip to main content

Introduction

The Auth Service API provides comprehensive authentication and authorization services for secure access to trading platforms and applications. It enables developers to implement robust identity verification, session management, and access control mechanisms.

🚀 Purpose of this API​

The Auth Service REST API is the mandatory first step for any application integrating with SynapseWave services.

It validates your provided API Key and Secret Key (issued by the licensing team) and returns a temporary sessionKey (JWT bearer token). This token must then be included in the Authorization: Bearer header for all subsequent API calls, such as:

  • Fetching chart / candlestick data (Chart Data REST API)
  • Placing / modifying orders
  • Retrieving market feeds, positions, or user profiles
  • Any other protected REST endpoints in the platform

Without a valid session token, protected endpoints will reject requests.

This single POST /authenticateKeys endpoint keeps your long-lived credentials (API Key + Secret) secure on your backend/server — never expose them in client-side code.