Skip to main content

Authentication

Authentication Method​

All API requests to the I LOCK IT Cloud must be authenticated using HTTP Basic Authentication. This method requires a valid email address and password.

Most endpoints require the Authorization header to be set with the base64-encoded credentials:

Authorization: Basic base64(email:password)

Example (plaintext)​

Authorization: Basic dXNlckBkb21haW4uY29tOnNlY3VyZVBhc3N3b3Jk

You must include this header for all endpoints unless explicitly stated otherwise.

How to Authenticate in Practice​

1. Obtain Credentials​

If you haven't received any credentials you must create an account at https://tracking.ilockit.bike.
We will assign your account to your I LOCK IT devices. Please get in touch with us.

2. Prepare HTTP Headers​

Each request must contain:

accept: application/json  
Authorization: Basic <your_encoded_credentials>

3. Send Request​

Use the appropriate endpoint with your method (GET or POST) and include query or body parameters as needed.

Authentication Example in cURL​

curl -X GET 'https://tracking.ilockit.bike/api/devices'   -H 'accept: application/json'   -u user@example.com:yourPassword

This command retrieves the list of devices linked to your account.

Failed Authentication​

If the credentials are invalid or missing, the API will respond with:

401 Unauthorized

Check the following:

  • ✅ The base64 encoding is correct
  • ✅ No extra characters (such as spaces or newlines) are present
  • ✅ The email/password combination is valid

ℹ️ Note: Some endpoints like firmware info retrieval do not require authentication.
Refer to the individual API documentation for details.