Protocol Glossary

• authenticated request

  An authenticated request is a request that the client supplies access token as part of the request parameter, so that the request is associated to a user account. Request made this way is considered by the system to be performed on behalf of a user.

  An action requiring authenticated request means that access token is to be supplied for all requests. This is usually done by the including a access_token parameter in the request body.

• access token

  An access token is an opaque string used by the system to identify the client and the user account of each request.

  Access token is obtained by calling the auth:login action. Each user may have a number of different access tokens created each time when the client calls the auth:login action.