Authentication & Security
How to authenticate with the TagMango API
All API requests require authentication via a Bearer token (JWT).
Bearer Token Authentication
Include your API key as a Bearer token in the Authorization header:
curl -X GET \
"https://api-prod-new.tagmango.com/api/v1/external/courses" \
-H "Authorization: Bearer <your-api-key>" \
-H "x-whitelabel-host: yourhost.tagmango.com"Required Headers
| Header | Required | Description |
|---|---|---|
Authorization | Yes | Bearer <your-api-key> |
x-whitelabel-host | Yes | Your whitelabel dashboard domain (e.g., yourhost.tagmango.com) |
x-timezone-offset | No | Timezone offset in minutes (e.g., 330 for IST) |
Timezone Offset
x-timezone-offset header is optional. If not provided, the server will use the default timezone. The value is in minutes.
Authentication Scheme
| Property | Value |
|---|---|
| Security Scheme Type | HTTP |
| HTTP Authorization Scheme | Bearer |
| Bearer Format | JWT |
Security
API key should be handled securely and not exposed to the client. Store it in environment variables and never commit it to source control.