Accessing APIs without React

As of c863c77 , a valid JWT is needed to access API endpoints. If you don't want to use the normal route (React) there are a few options:

• Programmatically through JS: See examples in Login.js, Admin.js, Search.js
• Programmatically through Python: See /server/test_api.py
• Using Postman

Using Postman

To use Postman:

• Get a valid JWT, which is returned by /api/user/login
  • You can do this through Postman or by capturing the returned access_tokenvalue using browser devtools

• Tell Postman to use that value for API calls
  • Copy the value
  • Edit the collection (three dots when hovering to right of collection name, Edit)

• Choose Authorization, Type: Bearer Token
• Paste value into the Token field, save

Start issuing API calls

Error codes

401 - Bad login credentials
403 - Tried to access an Admin endpoint with user-level credentials
422 - JWT value was corrupted/failed validation