LiveID+ uses multiple authentication mechanisms depending on the type of integration and the role of the caller. It is recommended to always pass authentication credentials as HTTP headers rather than query parameters or request body fields.
For server-to-server API calls, LiveID+ uses API key authentication. The API key is provided by Namirial during platform setup.
The API key should be passed as an HTTP header:
apikey: your-api-key-hereExample:
GET /api/authenticate/genAPIToken?idConference=abc123
apikey: your-api-key-hereAPI key authentication is required for the following endpoints:
GET /api/authenticate/genAPITokenPATCH /api/v2/rejectCallGET /api/v2/getAsyncRequestInfoPOST /api/v2/registerAlertEmail
For call-specific operations (e.g., retrieving conference data or audit data), a JWT bearer token is used. This token is scoped to a specific call and has a limited validity.
Tokens can be obtained in two ways:
- From the call closing event: The
message.tokenparameter in thecloseevent payload contains a valid JWT. - Via API: Call
GET /api/authenticate/genAPITokenwith the conference ID (requires API key authentication).
Pass the token in the Authorization header:
Authorization: Bearer <jwt_token>JWT bearer tokens are required for:
GET /api/v2/conferenceDataDELETE /api/v2/deleteAuditDataGET /api/v2/getAuditData
Register an email address to receive notifications when server-side callbacks fail.
Endpoint: POST /api/v2/registerAlertEmail
Authentication: API Key (header apikey)
Request Body:
{
"processId": "process-uuid",
"email": "alerts@your-system.com"
}Multiple email addresses can be registered by separating them with commas. Each registration overrides the previous email address for the given process. Sending an empty email value removes the current registration.