Authentication

Gomobile uses token-based authentication. Every API request needs a valid token in the Authorization header.

How it works

Include your API key in the Authorization header of every request:

Authorization: Bearer YOUR_API_KEY

Getting your API key

API keys are provisioned by the Gomobile team.

Need API access? Request your API key and our team will set you up within 24 hours.

Once you receive your API key, store it securely and use it for all API requests.

Making authenticated requests

Here's an example of an authenticated request:

curl -X GET https://api.gomobile.ma/api/users/me \
  -H "Authorization: Bearer YOUR_API_KEY"

Response:

{
  "id": "user-uuid",
  "email": "[email protected]",
  "firstName": "Your",
  "lastName": "Name",
  "organization": {
    "id": "org-uuid",
    "name": "Your Company",
    "slug": "your-company"
  }
}

Security best practices

• Never commit API keys to version control

• Use environment variables or a secrets manager

• Keep your API key private - Don't share it in public forums, emails, or chat

• Contact support immediately if your key is compromised

# Store your key as an environment variable
export GOMOBILE_API_KEY="your-api-key"

# Use it in scripts
curl -X GET https://api.gomobile.ma/api/users/me \
  -H "Authorization: Bearer $GOMOBILE_API_KEY"

Common authentication errors

Error	Meaning	Solution
401 Unauthorized	Invalid or missing token	Check your API key is correct
403 Forbidden	Valid token but insufficient permissions	Contact support

Next steps

Ready to make your first call?

• Making Your First Call - A complete walkthrough