HTTP Headers

This section describes the HTTP headers the API accepts from any request.

Content-Type

All requests must contain a content-type HTTP Header.

Accept Content-Types

Base Format	Content-Types	Content-Types
JSON	application/json	text/json is currently not an accepted content type
Form data	multipart/form-data	Only used when uploading variations

Content-Type Errors

Response Code	Notes
400	The content type was understood but could not be decoded. More information will appear in the response body
415	The content type is missing or is not supported

---

In cases where the content-type header has a problem then the response content-type is the default format for the API, currently application/json

---

The API does not currently adhere to the Accept content-type HTTP Header, all responses are sent in the same content-type as the received request provided the request’s content-type was valid

---

Authorization

This header is optional and is used to provide authentication details to the API for the current user which will enable the current user to access restricted API resources. Tokens can be obtained via the Login API. An example header is:

Authorization: Bearer 45267dbe480c8c7d799c62ccad92cb44f67ab086

The Authorization header accepts a string that is built from two parts, separated by a single space. The first part is the token type, the second is the access token itself.

Authorization Errors

Response Code	Notes
400	A malformed authorization header was provided
401	The authorization header is missing or the token was invalid or expired

Choosing an authorization token type

On failure the response headers contain a WWW-Authenticate header that indicates the token type that is required for access.