User Login - en-bvcsp

If the client sends an HTTP request to perform an operation on a resource while the device is either unauthenticated or its authentication has expired, the server will return a failure with code==9. In this case, you need to use this interface to perform authentication.
After this interface returns a 200 success code, it indicates that the authentication was successful. Subsequently, when sending other requests, you need to include the data.token string in the request. There are three ways to pass the token (listed in order of priority—choose one):

As a query parameter, with the key being "token".

In the "Authorization" header.

In the "Authorization" cookie.

In the "Sec-WebSocket-Protocol" header.
This interface does not guarantee data security; it relies on SSL to ensure data security. We recommend accessing this interface via HTTPS.

Once a token is created, it remains valid until it expires.

The steps for generating the encrypted password are as follows: sha256(sha256(account_password)_timestamp):

Timestamp: UTC time (the number of seconds since January 1, 1970, 00:00:00), and the difference between this timestamp and the backend system time should not be too large.

Ciphertext 1 = SHA256(id_password), which means combining "account_password" and then encrypting it using the SHA256 algorithm.

Encrypted password = SHA256_T: Ciphertext. The ciphertext itself is calculated as SHA256(Ciphertext 1_timestamp), meaning combining Ciphertext 1 with "_timestamp" and then encrypting it again using SHA256.

Example (we recommend using online SHA256 encryption to verify):

Account: admin

Password: 123456

Timestamp: 1721272800

Step 1: SHA256(admin_123456) results in: 6848d6405bf34bf9b2d82ed8822c756807632d3eaefedec90ac33cb32ac83671

Step 2: SHA256(6848d6405bf34bf9b2d82ed8822c756807632d3eaefedec90ac33cb32ac83671_1721272800) results in: ebc145ec6decbc3e7842f1fbc2bd6d0cf65e76f1dc3b7e21ebfd01a5c5a8c65a

The encrypted password is: SHA256_T:ebc145ec6decbc3e7842f1fbc2bd6d0cf65e76f1dc3b7e21ebfd01a5c5a8c65a

Note: The passwords stored in the database have already been encrypted by the backend.

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

Responses

🟢200Success

application/json

Body

Example

{
    "code": 0,
    "msg": "OK",
    "data": {
        "token": "_c9g7HJwCXIYpDq18gcsM00ZdCHAzO3w_L9XCbDGOffsdpMfDHHICrP0W9RtpiAYYvRIye94GwQUbkD0wWUYrTGG2U-VT8GGOuEIMTPZVL9Cv8z-7rflw9gjz-KjJCP66",
        "timeout": 14400,
        "appID": 529,
        "remaining": 0,
        "locking": 0,
        "change_password": false
    }
}