Authentication

Authorization: Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6Imluc18y...

┌─────────────────┐
│   User Login    │
│  (via Clerk)    │
└────────┬────────┘
         │
         ▼
┌─────────────────┐
│ Clerk Session   │
│   Established   │
└────────┬────────┘
         │
         ▼
┌─────────────────┐
│  Get JWT Token  │
│  via getToken() │
└────────┬────────┘
         │
         ▼
┌─────────────────┐
│  API Request    │
│  with Bearer    │
└────────┬────────┘
         │
         ▼
┌─────────────────┐
│  API Verifies   │
│  Clerk Token    │
└─────────────────┘

import { useAuth } from '@clerk/clerk-expo';

function MyComponent() {
  const { getToken } = useAuth();

  const fetchData = async () => {
    const token = await getToken();

    const response = await fetch('https://api.soundchecklive.io/api/v1/users/me', {
      headers: {
        'Authorization': `Bearer ${token}`,
      },
    });
  };
}

import { useAuth } from '@clerk/nextjs';

function MyComponent() {
  const { getToken } = useAuth();

  const fetchData = async () => {
    const token = await getToken();

    const response = await fetch('https://api.soundchecklive.io/api/v1/users/me', {
      headers: {
        'Authorization': `Bearer ${token}`,
      },
    });
  };
}

// Go example
import "github.com/clerk/clerk-sdk-go"

func AuthMiddleware(next http.Handler) http.Handler {
    return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
        token := r.Header.Get("Authorization")
        claims, err := clerk.VerifyToken(token)
        if err != nil {
            http.Error(w, "Unauthorized", 401)
            return
        }

        ctx := context.WithValue(r.Context(), "userID", claims.Subject)
        next.ServeHTTP(w, r.WithContext(ctx))
    })
}

{
  "status": 401,
  "code": "UNAUTHORIZED",
  "message": "Authentication is required to access this resource",
  "details": ""
}

{
  "status": 403,
  "code": "FORBIDDEN",
  "message": "You do not have permission to access this resource",
  "details": ""
}

# Use the Clerk dashboard to get a test token
# Or log in via the mobile/web app and extract from requests

TOKEN="eyJhbGciOiJSUzI1NiIs..."

curl -H "Authorization: Bearer $TOKEN" \
  http://localhost:4000/api/v1/users/me