User Authentication

User Login

The Sign In API call requires an e-mail address or a phone number (as user name) and a password. This exchange should be over HTTPS only. In response, API returns the user record including the token that identifies the user.

Options

• Authentication token
• OAuth access token
• ID token

ID token syntax

{
  "id": "<Issuer_Identifier>",
  "sub": "<Subject_Identifier-can-be-oauth_access_grants.id>", 
  "access_token": "<User_Acess_Token>"
}

ID token example

{
  "id": "https://punchh.com/id_token",
  "sub": "app_scoped_id",
  "access_token": "access_token"
}