Your API token is a secret. Don’t share it or expose it in client-side code
such as browsers or mobile apps. Load it on your server from an environment
variable or a key management service.
Authorization: Bearer BREAKROOM_API_TOKEN
curl https://api.breakroomapp.com/functions/v1/get-time-off-requests \
-H "Authorization: Bearer $BREAKROOM_API_TOKEN" \
-H "Content-Type: application/json" \
-d '{"limit":50}'
Auth failures
| Status | When |
|---|---|
401 | Missing, malformed, or invalid API token |
403 | Valid token, but the member can’t access the requested org or resource |