Authentication
Authentication controls how browsers, users, bots, and integrations prove identity before accessing workspace resources.
How To Use This Page
- Use browser session routes for signed-in product flows.
- Use token-based API access only for integrations that need it.
- Keep credentials out of prompts, logs, screenshots, and shared examples.
Developer Checklist
- Confirm the workspace, artifact, bot, server, or operation reference comes from a prior response or visible product route.
- Check authentication and role requirements before sending a request.
- Use response data to drive the next call instead of reconstructing identifiers from display text.
- Preserve visible error details when debugging.
Media To Add
- Sequence diagram: login, session check, API request, and workspace authorization. It helps developers integrate safely. Source: browser login and API session flow.