Skip to main content

​
Authentication

Artos API requests use an Okta-issued access-token JWT. Include the token as a Bearer token:

​
Get an Okta access token

Sign in through your organization’s Okta application and request an access token for the Artos API. The exact sign-in experience depends on your organization’s Okta application and OAuth/OIDC configuration. Do not use an ID token as the API credential. Send the access token issued for the Artos API.

​
Make an API request

​
Token requirements

The access token must:
  • Be issued by your organization’s Okta authorization server.
  • Be intended for the Artos API.
  • Be valid and unexpired.
  • Identify a user who has access to the requested Artos organization and resource.
Artos uses the identity and organization associated with the token when authorizing each request. You do not need to send an organization ID separately for normal API calls.

​
File access

File listings return an opaque resource_id. They do not return S3 URLs. Source-file viewers use POST /source-file, which authorizes the source-file resource with the user’s Bearer token on every request:
OnlyOffice and other session-based document viewers send the resource ID to POST /document-file-session with the same Bearer token:
The response contains a short-lived session token for the document viewer:
Treat resource IDs and session tokens as opaque values. Do not expose session tokens in application logs. To stream the file, send the session token in the Authorization header—not in the URL:
/open-document?session_token=... is not a valid ordinary download flow. The query form is reserved for the OnlyOffice server-to-server integration, which also requires a separately signed OnlyOffice request JWT.

​
Authentication errors

​
401 Unauthorized

The request is missing a Bearer token, or the token is malformed, expired, invalid, or intended for a different API.
Obtain a fresh Okta access token and retry the request.

​
403 Forbidden

The token is valid, but the signed-in user is not allowed to access the requested organization or resource. Contact your organization’s Artos administrator to request access.