TrackDrive allows using both basic and token authentication to secure API requests.

Company Access Tokens use basic authorization, which requires users or applications to provide a valid set of credentials, including a public and private key combination that is included in the Authorization header of an API request. They provide granular permissions for each keypair, allowing for more fine-grained control over API access.

Developer Access Tokens use token authorization, which requires users or applications to provide a valid auth_token in the Authorization header of an API request. They grant access based on the user's existing permissions, including access to companies the user has permission to access.

Basic authorization includes a base64-encoded public and private key combination would look like this:

curl -H "Authorization: Basic BASE64_ENCODED_PUBLIC_KEY_AND_PRIVATE_KEY" https://subdomain.trackdrive.com/api/v1/resource

Replace BASE64_ENCODED_PUBLIC_KEY_AND_PRIVATE_KEY with the base64 encoded string of your public key and private key separated by a colon. For example, if your public key is user and private key is pass, you can use the following command to generate the encoded string:

echo -n 'tdpub1234:tdprv1234' | base64

This will output the encoded string dXNlcjpwYXNz. So the final curl command will look like this:

curl -H "Authorization: Basic dXNlcjpwYXNz" https://subdomain.trackdrive.com/api/v1/resource

Note that the -n option is used with echo to remove the trailing newline character from the output.