You are viewing an old version of this page. View the current version.
Compare with Current View Page History
Version 1 Next »
All Tidepool services are accessed via RESTful URLs at api.tidepool.org.
api.tidepool.org
Use of our APIs is documented at https://developer.tidepool.org and via source code and documentation found at https://github.com/Tidepool_org .
All API calls are RESTful and require a unique, valid session token that is obtained during authentication and is not exposed in the URL.
All communication with APIs is encrypted via TLS/HTTPS. Data is transmitted to the web application as JSON streams over RESTful APIs.
New session tokens are generated upon login and invalidated on logout.
Session tokens are 1024 bits and expire after 30 days or upon logout.
1024 bits
Session IDs are only included in the encrypted HTTPS header and are not exposed in the URL.