Authentication

Authentication and authorization questions for API access

What is the authentication mechanism used by Suki APIs?

We support

• OAuth 2.0 ID token for public clients such as browsers, mobile devices etc.
• Access token for confidential clients such as backend systems.

What is the webhook authentication mechanism?

We support HMAC (Hash-based message authentication code) for webhook authentication (Details can be shared)

How are errors handled during JWT token failures?

Client systems cannot authenticate with Suki’s platform via APIs when a JWT token fails. It’s handled with standard HTTPS error codes; refer API reference