TagMangoTagMango Docs

Authentication & Security

How to authenticate with the TagMango API

All API requests require authentication via a Bearer token (JWT).

Bearer Token Authentication

Include your API key as a Bearer token in the Authorization header:

curl -X GET \
  "https://api-prod-new.tagmango.com/api/v1/external/courses" \
  -H "Authorization: Bearer <your-api-key>" \
  -H "x-whitelabel-host: yourhost.tagmango.com"

Required Headers

HeaderRequiredDescription
AuthorizationYesBearer <your-api-key>
x-whitelabel-hostYesYour whitelabel dashboard domain (e.g., yourhost.tagmango.com)
x-timezone-offsetNoTimezone offset in minutes (e.g., 330 for IST)

Timezone Offset

x-timezone-offset header is optional. If not provided, the server will use the default timezone. The value is in minutes.

Authentication Scheme

PropertyValue
Security Scheme TypeHTTP
HTTP Authorization SchemeBearer
Bearer FormatJWT

Security

API key should be handled securely and not exposed to the client. Store it in environment variables and never commit it to source control.

On this page