Guides
Authentication
User authentication flows and API Key authentication for API integrations.
Overview
WorkCloud has two authentication contexts:
- User authentication: registration, sign-in, and session lifecycle.
- API integration authentication: API Key based.
User authentication (web/app)
Standard user workflows include:
- Account registration
- Email/password sign-in
- Session refresh
- Logout
API integration authentication (recommended)
For external/system integrations, use API Keys:
- Create keys in your account API Keys management area.
- Send
X-API-Keyin request headers. - Rotate/revoke keys regularly.
Frontend integration notes
- Always use HTTPS.
- Handle HTTP 401 gracefully and redirect to sign-in.
- Never hard-code sensitive values in client-side code.