Authentication

Required on every Device API request

ANY /v1/device/*

The DeviceAuthGuard accepts only an ACTIVE device with an ACTIVE SECRET credential. PENDING, BLOCKED and INACTIVE devices receive 401.

Required headers

X-Device-Id: <device-id>
Authorization: Bearer <device-secret>

Example request

GET https://api-dev.zorgassistent.eu/v1/device/schedule
X-Device-Id: 40000000-0000-4000-8000-000000000001
Authorization: Bearer <device-secret>

Example response

401 Unauthorized
{
  "message": "Invalid device credentials",
  "statusCode": 401
}