Skip to main content

​
Okta JWT Authentication

In a single-tenant environment, use your organization’s Okta access token to authenticate Artos API requests.

​
Send the token

Example:

​
Use an access token, not an ID token

Okta can issue multiple token types. Use the access token whose audience is the Artos API. Do not send an ID token as the API Bearer credential.

​
User and organization access

The token identifies the signed-in user. Artos uses that identity to apply the user’s organization and resource permissions to each request. A valid Okta token does not automatically grant access to every Artos resource. The user must also have permission to access the requested document, template, or file.

​
Open a source file

File-listing responses contain an opaque resource_id, for example:
When the user opens the file, use the authenticated source-file route or the SDK’s openFile({ viewer: 'apryse' }) method. Source files are authorized with the user’s Bearer token on each read; they do not use a document-file session.

​
Troubleshooting

  • 401 Unauthorized: obtain a new Okta access token and verify that it is sent as Authorization: Bearer ....
  • 403 Forbidden: ask your Artos administrator to grant the signed-in user access to the resource.
  • 404 or an unavailable file: refresh the file listing and use the current resource_id.