# Authentication

Almost all API methods require a token-based HTTP Authentication.

In order to authenticate, the Authorization HTTP header needs to contain a [JWT Bearer Token](https://jwt.io/).

| Field         | Type   | Description                                    |
| ------------- | ------ | ---------------------------------------------- |
| Authorization | String | Obtained after initializing the Biometrid API. |

We have two kinds of Authorization tokens: **account** and **user**.

To initialize the **Account flow**:

{% content-ref url="../api-account/initialize" %}
[initialize](https://biometrid.gitbook.io/biometrid-api/api-account/initialize)
{% endcontent-ref %}

To initialize the **User flow**:

{% content-ref url="../api-user/initialize" %}
[initialize](https://biometrid.gitbook.io/biometrid-api/api-user/initialize)
{% endcontent-ref %}

To set the Authorization **token,** we need to send the HTTP Header **Authorization**.

{% hint style="info" %}
Authorization: Bearer **token**
{% endhint %}
