Get JWT Token API — Signature

Get JWT Bearer Token

POST your api_key and api_secret to receive a signed JWT (JSON Web Token). Use this token in the Authorization: Bearer header of the next API call. Token is valid for 1 hour.

Concept: JWT Token Generation · OAuth 2.0 style flow

Addition API Series — same operation, different style

1. URL Params 2. JSON Body 3. Basic Auth 4. Custom Auth 5. API Key 6. Get Token 7. Bearer Token 8. Integer Response

Endpoint

POST https://labs.lowcademy.com/apis/add-token

POST api_key + api_secret to this endpoint → receive a JWT token

Use the JWT as Authorization: Bearer <token> when calling add-bearer.php

Credentials

Lab Credentials — For Training Use Only

api_keylc-api-key-2024

api_secretlc@Secret#2024

Request Body (JSON)

Field	Type	Required	Description
api_key	String	Required	Your API key
api_secret	String	Required	Your API secret

{
  "api_key"   : "lc-api-key-2024",
  "api_secret": "lc@Secret#2024"
}

Sample Requests

cURL

curl -X POST https://labs.lowcademy.com/apis/add-token \
     -H "Content-Type: application/json" \
     -d '{"api_key":"lc-api-key-2024","api_secret":"lc@Secret#2024"}'

JavaScript (fetch)

const res = await fetch('https://labs.lowcademy.com/apis/add-token', {
  method : 'POST',
  headers: { 'Content-Type': 'application/json' },
  body   : JSON.stringify({ api_key: 'lc-api-key-2024', api_secret: 'lc@Secret#2024' })
});
const { token } = await res.json();
// Now use token in the next API call

Response — 200 OK

Field	Type	Description
success	Boolean	Always `true`
token	String	Signed JWT (HS256). Use as: `Authorization: Bearer <token>`
token_type	String	Always `"Bearer"`
expires_in	Integer	Seconds until expiry — always 3600 (1 hour)
expires_at	String	Human-readable expiry timestamp

{
  "success"   : true,
  "token"     : "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJhcGlfdXNlciIsImlzcyI6ImxhYnMubG93Y2FkZW15LmNvbSIsImlhdCI6MTcyMDc4MDAwMCwiZXhwIjoxNzIwNzgzNjAwfQ.xxxxxxxxxxx",
  "token_type": "Bearer",
  "expires_in": 3600,
  "expires_at": "2026-07-12 11:30:00"
}

Error Responses

200

OK — Token returned. Copy it and use in add-bearer.php.

401

Unauthorized — Invalid api_key or api_secret.

400

Bad Request — Missing or invalid JSON body.

405

Method Not Allowed — Use POST.