Skip to content
/Authorize

Authorize

Operations

Exchange an org token for a bearer

Request

Resolves the given email against your organization, validates the org-level integration token, and — if your organization has this API product's feature provisioned — returns a bearer token to use as Authorization: Bearer <token> on every other endpoint. Tokens expire after 5 minutes; call this endpoint again to get a new one. Authorization is limited to 60 requests per minute per client IP and API product; subsequent bearer requests are limited per account.

Bodyapplication/jsonrequired
emailstring, (email), non-empty^[^@]+@[^@]+$required
Example:"dispatch@example.com"
orgTokenstring, [ 0 .. 100 ] charactersrequired
Example:"ll_example-org-token"
curl -i -X POST \
  https://azuatgateway.loadlink.ca/freight-matching/v2/authorize \
  -H 'Content-Type: application/json' \
  -d '{
    "email": "dispatch@example.com",
    "orgToken": "ll_example-org-token"
  }'

Responses

Bearer issued

Headers
X-RateLimit-Limitinteger

Requests allowed per window, enforced per client IP and API product before an account claim exists. Default is 60 per 60s.

X-RateLimit-Remaininginteger

Requests remaining in the current window.

X-RateLimit-Resetinteger

Unix timestamp (UTC seconds) when the window resets.

Bodyapplication/json
accessTokenstring
tokenTypestring
expiresIninteger, (int32)
organizationNamestring
userFirstNamestring or null
userLastNamestring or null
Response
{
  "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "tokenType": "Bearer",
  "expiresIn": 300,
  "organizationName": "Acme Logistics",
  "userFirstName": "Jane",
  "userLastName": "Doe"
}