Authentication

Every endpoint except login requires an access token.

Getting a token

curl -X POST https://api.huduma.cloud/auth/login \
  -H "Content-Type: application/json" \
  -d '{"email":"you@example.com","password":"your-password"}'

Sending the token

Attach it as a bearer credential:

Authorization: Bearer <token>

Integrations written against the older platform

The previous HudumaSMS platform expected the token in an X-Huduma header rather than Authorization:

X-Huduma: Bearer <token>

Both are still accepted, so an existing integration keeps working unchanged and does not need a reissued credential. Use Authorization for anything new.

Keeping the token safe

A token carries your full account permissions, including the ability to spend credits. Keep it on your server. Never ship it in a mobile app, a browser bundle, or a public repository — anyone holding it can send messages billed to you.

If you believe a token has leaked, change your password from the dashboard, which invalidates tokens issued against the old one, then contact contact@hudumasms.com.

Getting started

API reference

Guides

Getting a token

Sending the token

Keeping the token safe

​Getting a token

​Sending the token

​Keeping the token safe

Getting a token

Sending the token

Keeping the token safe