Static User Tokens may be removed in future

[uar316025]

Hello, if you read the JeraSoft Billing CoreAPI docs, you can see next thing:

Deprecated. Static User Tokens are available for backward compatibility and may be removed in future.

i suggest to use JSON Web Tokens instead.

[mexicarne]

Hello, while I agree with that, I no more have access to JS. If you can provide me with some test account, I can do the change.

[uar316025]

Sorry, i don't have permissions to providing a test accounts.

How do you run/test a code without vcs ?) and for what purpose are you doing this? (just wondering)

There from docs:

JSON Web Tokens

This mechanism is currently preferred. It has wide support by the programming
languages with dozens of the libraries available to work with JWT. Please check jwt.io to get more details.

The flow of authentication is following:

• Authentication request to exchange login and password to JWT
• Any other request with JWT sent in HTTP Authorization header
• Token refresh request, a few seconds before current token expiration

Let's check the flow step by step.

• Authentication Request
  As a first step you have to call iam.auth.jwt.authenticate method
  with two arguments - login and password. In the response you
  will be given token and its expiry as a unix-timestamp ({"token": "***", "expiry: 12345.678}).

• Regular Requests
  Now you can send your regular API requests. Each of them should contain
  HTTP header Authorization: Bearer <TOKEN>, where you put real token
  instead of <TOKEN>.

• Token Refresh
  Each token is valid for a specific amount of time. When each token is
  issued you are also given its expiry timestamp. You have to call
  iam.auth.jwt.refresh without parameters a few seconds before token
  expiration to obtain a new one.

[mexicarne]

How do you run/test a code without vcs ?) and for what purpose are you doing this? (just wondering)

Did that for client of mine couple of years ago. They changed theirs mind to use JS eventually, but I got the permission to opensource the library, so it may come in handy for somebody, who use JS.

Thank you for JWT suggestion. I'll implement that when time permits.