---
title: REST API Security and Authentication
slug: rm/rest-api-security-and-authentication
docTags: 
createdAt: 2026-06-09T13:38:46.972Z
---

Blueprint's REST API is served over HTTPS if Blueprint is configured to run with SSL. HTTPS ensures secure communication of API requests and responses.

Blueprint exclusively supports Basic Authentication for the submission of credentials. Thereafter, a proprietary token is used. To obtain a token, you must provide an Authorization header with Basic scheme. Refer to the [REST API Quick Start Example](docId:4quKCsjU1MltN-ozmstvt) for more information.

# Token Expiry

You can obtain the token expiry by viewing the header of the Authenticate response. The token expiry is stored in the `blueprinttokenexpirydate` parameter of the Authenticate response header.

Here is an example of the `blueprinttokenexpiry` parameter in the [REST API - Authenticate Request](docId\:xFWH5-PdillyWazkMg3z1) response header:

```rust
{

'content-length': '238',

'x-xss-protection': '1; mode=block',

'blueprinttokenexpirydate': 'Thu, 28 Nov 2013 17:20:34 GMT',

'x-content-type-options': 'nosniff',

'expires': '-1',

'server': 'Blueprint',

'pragma': 'no-cache',

'cache-control': 'no-cache',

'date': 'Thu, 28 Nov 2013 16:50:34 GMT',

'x-frame-options': 'deny',

'content-type': 'application/json; charset=utf-8',

'authorization': 'BlueprintToken M6Uf+rS0WsqD89d2Rf+nw18...[Truncated]...GtqNUWYFuNC81mF0o='

}
```