{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-country-apis-catalog/product-catalog/se/authenticate/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"type":"markdown"},"seo":{"title":"Token Metadata"},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"__idx":0,"id":"token-metadata"},"children":["Token Metadata"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This page explains the structure and lifecycle of JWT tokens generated by CONNECT Authenticate."]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"__idx":1,"id":"response-structure"},"children":["Response Structure"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The authentication response contains a single field:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Field"},"children":["Field"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Type"},"children":["Type"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["token"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["string"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The JWT Bearer token - a cryptographically signed string containing authentication claims. Valid for 1 hour."]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Example Response:"]}]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"json","header":{"controls":{"copy":{}}},"source":"{\n \"token\": \"eyJhbGciOiJSUzI1NiIsImtpZCI6Im…hPeGE7Ak8YtKFbA\"\n}\n","lang":"json"},"children":[]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"__idx":2,"id":"jwt-token-structure"},"children":["JWT Token Structure"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The JWT token is composed of three parts separated by dots (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["."]},"):"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"bash","header":{"controls":{"copy":{}}},"source":"{header}.{payload}.{signature}\n","lang":"bash"},"children":[]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Header"]}," - Contains metadata about the token type and signing algorithm"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Payload"]}," - Contains the claims (user information, scopes, expiration, etc.)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Signature"]}," - Cryptographic signature ensuring token integrity"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Example JWT token structure:"]}]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"json","header":{"controls":{"copy":{}}},"source":"eyJhbGciOiJSUzI1NiIsImtpZCI6IkQ3RTRBNzMxRjMyQjYwQzM4QTQxMkREMUVCNEJBOTg4IiwidHlwIjoiYXQrand0In0\n.\neyJpc3MiOiJodHRwczovL3NlLXdlYnNlcnZpY2UuYXBwcy5jcmVkaXRzYWZlLmNvbS8iLCJuYmYiOjE3MzA5NzMyNzksImlhdCI6MTczMDk3MzI3OSwiZXhwIjoxNzMwOTc2ODc5LCJhdWQiOiJDcmVkaXRzYWZlU3dlZGlzaEFQSSIsInNjb3BlIjpbImRhdGFjaGVjayIsImNvbXBhbnlnZXRkYXRhIl0sImNsaWVudF9pZCI6InlvdXItdXNlcm5hbWUiLCJqdGkiOiI4RTdBNDk2QTZFQkZCQzQ2OTY0QzRDQTgyMzM3QkU5NiJ9\n.\nsignature_hash\n","lang":"json"},"children":[]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Token Handling"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["While JWT tokens can be decoded to inspect their payload, you should ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["never"]}," attempt to manually verify or modify tokens. Always treat tokens as opaque strings and rely on Creditsafe's services to validate them."]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"__idx":3,"id":"token-lifecycle"},"children":["Token Lifecycle"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Understanding the token lifecycle is critical for proper implementation:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Validity Period:"]}," 1 hour from generation"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Concurrent Tokens:"]}," Multiple valid tokens can exist simultaneously"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Cross-Service Usage:"]}," Same token works for all Sweden REST APIs"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Expiration Handling:"]}," Service calls return 403 when token expires"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"__idx":4,"id":"token-lifecycle-diagram"},"children":["Token Lifecycle Diagram"]},{"$$mdtype":"Tag","name":"Mermaid","attributes":{"data-language":"mermaid","diagramSource":"flowchart TD\n A[POST /v1/authenticate] --> B[Token Generated]\n B --> C[Token Valid for 1 Hour]\n C --> D{Token Status?}\n D -->|Valid| E[Use in API Calls]\n D -->|Expired| F[403 Token Expired]\n F --> A\n E --> G[Service Returns Response]\n G --> D\n","diagramHtml":"

Valid

Expired

POST /v1/authenticate

Token Generated

Token Valid for 1 Hour

Token Status?

Use in API Calls

403 Token Expired

Service Returns Response

"},"children":["flowchart TD\n A[POST /v1/authenticate] --> B[Token Generated]\n B --> C[Token Valid for 1 Hour]\n C --> D{Token Status?}\n D -->|Valid| E[Use in API Calls]\n D -->|Expired| F[403 Token Expired]\n F --> A\n E --> G[Service Returns Response]\n G --> D\n"]},{"$$mdtype":"Tag","name":"blockquote","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Diagram summary (accessibility): A token is generated via POST to the authenticate endpoint. It remains valid for one hour. On each use, if the token is still valid it is used in API calls and the service returns a response; if the token has expired, a 403 error is returned and a new token must be requested."]}]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"__idx":5,"id":"token-refresh-best-practices"},"children":["Token Refresh Best Practices"]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"success","name":"Recommended Approach"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Proactive Refresh Strategy:"]}]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Track when the token was generated"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Set a refresh timer for ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["55 minutes"]}," after generation"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Request a new token before the current one expires"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["This ensures uninterrupted service access"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Generating new tokens too frequently (e.g., every few minutes) can degrade performance."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Alternative Approach:"]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Catch 403 Token Expired responses"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Refresh the token reactively"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Retry the failed request with the new token"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"__idx":6,"id":"cross-api-token-usage"},"children":["Cross-API Token Usage"]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"One Token for All Services"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The same authentication token can be used across ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["all"]}," Creditsafe Sweden REST APIs:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["GetDataUnits REST"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["DateCheck Consumer REST"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["DateCheck Company REST"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["GetSignatory v2 REST"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["GetData REST"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["SPAR Consumer search v2 REST"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You do ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["not"]}," need to authenticate separately for each API."]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"__idx":7,"id":"security-considerations"},"children":["Security Considerations"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Token Storage:"]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Store tokens securely in memory or secure storage"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Never log tokens in plain text"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Never commit tokens to version control"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Use environment variables or secure vaults for credential management"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Token Transmission:"]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Always use HTTPS when transmitting tokens"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Include tokens only in the Authorization header"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Never pass tokens in URL parameters or query strings"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Token Rotation:"]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Implement automatic token refresh before expiration"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Invalidate old tokens once new ones are acquired (optional)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Monitor for authentication failures and implement retry logic"]}]}]},"headings":[{"value":"Token Metadata","id":"token-metadata","depth":1},{"value":"Response Structure","id":"response-structure","depth":2},{"value":"JWT Token Structure","id":"jwt-token-structure","depth":2},{"value":"Token Lifecycle","id":"token-lifecycle","depth":2},{"value":"Token Lifecycle Diagram","id":"token-lifecycle-diagram","depth":3},{"value":"Token Refresh Best Practices","id":"token-refresh-best-practices","depth":2},{"value":"Cross-API Token Usage","id":"cross-api-token-usage","depth":2},{"value":"Security Considerations","id":"security-considerations","depth":2}],"frontmatter":{"seo":{"title":"Token Metadata"}},"lastModified":"2026-04-28T11:14:53.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/country-apis-catalog/product-catalog/se/authenticate/documentation/metadata","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}