The authentication system uses JWT (JSON Web Tokens) to secure API endpoints. Obtain an access token by logging in with valid credentials.
Test credentials: username admin, password admin123
POST /auth/login
curl -X POST http://localhost:8000/auth/login \
-H "Content-Type: application/x-www-form-urlencoded" \
-d "username=admin&password=admin123"
The username for authentication
Response
JWT access token for authenticating subsequent API requests
The token type, always “bearer”
{
"access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
"token_type": "bearer"
}
Error responses
{
"detail": "Usuario o contraseña incorrectos"
}
Using the access token
Once you have obtained an access token, include it in the Authorization header for authenticated requests:
curl -X POST http://localhost:8000/products/ \
-H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
-H "Content-Type: application/json" \
-d '{"name": "Product name", "description": "Description", "category": "Category"}'
Access tokens expire after a configured time period. When a token expires, you’ll receive a 401 Unauthorized response and need to obtain a new token by logging in again.