Authentication

All API requests require authentication using an API key or OAuth 2.0 token.

API Key Authentication

Include your API key in the Authorization header:

curl https://api.islamicopenfinance.com/api/v1/contracts \
  -H "Authorization: Bearer iof_sk_live_abc123..."

Via the dashboard or API:

const key = await iof.apiKeys.create({
  name: "Production Server",
  permissions: ["contracts:*", "kyc:read"],
});

For user-delegated access:

curl https://api.islamicopenfinance.com/api/v1/contracts \
  -H "Authorization: Bearer iof_at_abc123..."

See OAuth 2.0 Guide for implementation details.

{
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Invalid or missing API key"
  }
}

{
  "error": {
    "code": "FORBIDDEN",
    "message": "API key lacks required permissions"
  }
}