Authentication

Authentication mechanisms and security questions for Suki platform integration

What is the authentication mechanism used by Suki Platform?

We support

• OAuth 2.0 ID token for public clients such as browsers, mobile devices etc.
• Access token for confidential clients such as backend systems.

What is the webhook authentication mechanism?

We support HMAC

(Hash-based message authentication code)

for webhook authentication (Details can be shared)

How will errors be handled during JWT token failures?

Client systems cannot authenticate with Suki’s platform when a JWT token fails. It’s handled with standard HTTPS error codes. Refer login API