> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cariqa.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Token-based authentication for the Cariqa Connect API

The Cariqa Connect API uses **JWT-based Bearer tokens** for authentication. All requests to protected endpoints must include a valid token in the `Authorization` header.

## Access Token

1. Contact **Cariqa** to request an **Access Token**
2. Tokens are provided through **private communication channels** during onboarding

## Using the Bearer Token

Include the Authorization header in all API requests:

<CodeGroup>
  ```bash cURL theme={null}
  curl -X GET "https://connect.cariqa.com/api/v1/stations/around/?latitude=49.630383&longitude=8.368902&distance=10" \
    -H "Authorization: Bearer YOUR_API_TOKEN" \
    -H "Content-Type: application/json"
  ```

  ```python Python theme={null}
  import requests

  headers = {
      "Authorization": "Bearer YOUR_API_TOKEN",
      "Content-Type": "application/json"
  }

  response = requests.get(
      "https://connect.cariqa.com/api/v1/stations/around/",
      headers=headers,
      params={
          "latitude": 49.630383,
          "longitude": 8.368902,
          "distance": 10
      }
  )
  ```

  ```javascript JavaScript theme={null}
  const response = await fetch('https://connect.cariqa.com/api/v1/stations/around/?latitude=49.630383&longitude=8.368902&distance=10', {
    headers: {
      'Authorization': 'Bearer YOUR_API_TOKEN',
      'Content-Type': 'application/json'
    }
  });
  ```
</CodeGroup>

## Token Expiration

* Access tokens are currently issued **without an expiration date**
* Tokens may be **revoked by the Cariqa team upon client request**
* Multiple tokens can be issued for service continuity and zero-downtime rotation

## Security Recommendations

1. Store secrets in a secure environment
2. Use **HTTPS** for all API requests
3. Rotate credentials periodically
4. Do no log sensitive credentials