Module: Developer_Resources
Authentication Protocol
Secure programmatic access to the EduFlow API using JWT and institutional API Keys.
EduFlow utilizes a dual-authentication mechanism: Session-based JWTs for front-end clients, and Cryptographic API Keys for server-to-server integrations.
Generating API Keys
API keys are bound to your institution's tenant and should be treated with the same security protocols as a master password.
- Log in to the EduFlow Dashboard as an Owner.
- Navigate to School Settings > Developer & API.
- Click Generate New Key. You will be prompted to name the key (e.g., "Library System Integration").
- Copy the key immediately. It will never be shown again.
KEY ROTATION
If you suspect an API key has been compromised, revoke it immediately from the dashboard. This will sever access for any system using that key within milliseconds.
Authentication Headers
Include your API key in the Authorization header of every HTTP request made to the EduFlow REST API.
Authorization: Bearer eduflow_live_xxxxxxxxxxxxxxxxx