Login

To start working with the VES Public REST API, users must first authenticate themselves. The VES REST API authorization process is based on the OAuth 2.0 Authorization Framework and involves obtaining an access token and a refresh token.

  • Access token is a string that represents authorization issued to the client and that must be used in all requests during the current logon session.
  • Refresh token is a string that represents authorization granted to the client and that can be used to obtain a new access token if the current access token expires or becomes lost.

Get Authorization Tokens

The HTTP POST request to the /api/v1/login endpoint retrieves an access token and a refresh token.

SecurityuserAuth
Request
Request Body schema: application/json
password
required
string non-empty

Password of the specified Windows user.

userName
required
string non-empty

Windows user name.

Responses
200

OK

400

Bad Request

401

Unauthorized

500

Internal Server Error

post/api/v1/login
Request samples
application/json
{
  • "userName": "CORP\\john.smith",
  • "password": "1234567"
}
Response samples
application/json
{
  • "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJDT1JQXFxqb2huLnNtaXRoIiwiZXhwIjoxNzE5MDAwMDAwfQ.example",
  • "expiresAt": "900",
  • "refreshToken": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4"
}

Refresh Authorization Tokens

The HTTP POST request to the /api/v1/refreshToken endpoint retrieves a new pair of access and refresh tokens. The previous refresh token becomes invalid and cannot be used again.

SecurityuserAuth
Request
Request Body schema: application/json
refreshToken
required
string non-empty

Refresh token received in the previous login or refresh response.

Responses
200

OK

400

Bad Request

401

Unauthorized

500

Internal Server Error

post/api/v1/refreshToken
Request samples
application/json
{
  • "refreshToken": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4"
}
Response samples
application/json
{
  • "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJDT1JQXFxqb2huLnNtaXRoIiwiZXhwIjoxNzE5MDAwMDAwfQ.example",
  • "expiresAt": "900",
  • "refreshToken": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4"
}

Log Out

The HTTP DELETE request to the /api/v1/logout endpoint performs logout from the VES API for an authorized user. After logout, both the access token and refresh token become invalid.

SecurityuserAuth
Responses
204

No Content

401

Unauthorized

500

Internal Server Error

delete/api/v1/logout
Request samples
Response samples
application/json
{
  • "message": "string"
}

Document updated 2026-10-26

Page content applies to build 13.1.0.334