Authentication

This API uses Firebase Authentication and thus requires a Firebase token. This token can be obtained by logging in from the client side application.

There are three kinds of users:

  • Admins
  • Salesmen
  • Customers

Admins have access to the admin panel. Meanwhile customers and salesmen have access to their respect mobile applications.

Accessing APIs

Every request needs to have an authorization header. That header should have a bearer token in the format

Bearer <token>

The APIs will either deny access on absence of the token or selectively allow access depending on the user who generated the token