Authenticating the Embedabble Designer
Courier Create uses JWT authentication to securely authorize access to template and brand editing features. While development can begin using a client key, production environments should rely on JWTs with appropriate scopes for fine-grained access control.
Generating a JWT
To generate a JWT, make a POST request to the Courier API with the required scopes and authentication details:
Full Tenant Access
Grants access to all tenants and their notification data.
Specific Tenant Notification Access
Limits access to a specific tenant.
Available JWT Scopes
Use these scopes to fine-tune access and secure your integration. Ensure your frontend tokens are limited to the least privileges necessary for the intended operations.
-
tenants:read
| Read all tenant data -
tenants:notifications:read
| Read all notification templates -
tenants:notifications:write
| Write notification templates -
tenants:brand:read
| Read brand settings across tenants -
tenant:$TENANT_ID:read
| Read data for a specific tenant -
tenant:$TENANT_ID:notification:read
| Read specific tenant’s notifications -
tenant:$TENANT_ID:notification:write
| Write specific tenant’s notifications -
tenant:$TENANT_ID:brand:read
| Read brand settings for a specific tenant -
tenant:$TENANT_ID:brand:write
| Write brand settings for a specific tenant