Documentation / API Authentication / Bearer Token Usage

Bearer Token Usage

Bearer Token Usage for PanelConfig API consumers and operators.

Bearer tokens must be sent in the HTTP Authorization header. Do not send tokens in query strings because URLs can be logged by proxies, browsers, analytics tools, and server access logs.

Procedure

  1. Generate or identify the token in PCAdmin.
  2. Send a validation request to /api/v1/me.php.
  3. Confirm that the JSON envelope contains success: true.
  4. Move the token into the final secret storage location.
  5. Review request logs after the integration starts using the API.

Example

curl -i https://panel.example.com/api/v1/me.php \
  -H "Authorization: Bearer pc_YOUR_TOKEN" \
  -H "Accept: application/json"

Troubleshooting

  • Check that the web server forwards the Authorization header to PHP.
  • Make sure the token starts with the copied pc_ value and has not been cut off.
  • Confirm the token has not expired.
  • Confirm the user attached to the token is still active.

Audit Logging

Token creation calls the audit helper. Authenticated API requests update last_used_at and insert request records into api_requests when the table exists.

← API Token Authentication Creating API Tokens →