> For the complete documentation index, see [llms.txt](https://doc.blowhorn.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc.blowhorn.com/api-docs/authentication/customer-authentication.md).

# Customer Authentication

Authentication APIs for customers

API authentications are performed by using the API key. Customers will be shared with an API key over email. Alternatively they can get the same via below customer authentication API to get the API key.

## Customer Authentication

<mark style="color:green;">`POST`</mark> `/customer/auth`

It's time to authenticate your first integration with a Blowhorn API for customer authentication. This api takes base64 encoded username and password to authenticate the customer and returns the API key. Post authentication customers should be able to authenticate and use Blowhorn APIs by just passing API key each time in the header.

#### Request Body

| Name                                       | Type   | Description                    |
| ------------------------------------------ | ------ | ------------------------------ |
| username<mark style="color:red;">\*</mark> | String | Base64 encoded username string |
| password<mark style="color:red;">\*</mark> | String | Base64 encoded password string |

{% tabs %}
{% tab title="200: OK After successful authentication" %}

```javascript
{
    "status": "PASS",
    "api_key": "Bj143Lm09qjQ"
}
```

{% endtab %}

{% tab title="400: Bad Request Bad Request/Validation Error" %}

```javascript
{
    "status": "FAIL",
    "message": "Sample Error Message"
}
```

{% endtab %}
{% endtabs %}

{% tabs %}
{% tab title="Example/Schema" %}

```json
{
    "email": "test@xyz.com",
    "password": "1234"
}
```

{% endtab %}
{% endtabs %}

#### Base64 Encoding

{% tabs %}
{% tab title="Python" %}

```python
import base64
import requests

auth_string = "email:password"
auth_string_bytes = auth_string.encode('ascii')

base64_bytes  = base64.b64encode(auth_string_bytes)
base64_string = base64_bytes.decode('ascii')

url = 'https://blowhorn.com/api/customer/auth'
headers = {'Authorization': base64_string}

response = requests.get(url, headers=headers)

api_key_string = response.json().get('api_key')
api_key_bytes  = api_key_string.encode('ascii')
b64_bytes      = base64.b64decode(api_key_bytes)
api_key        = b64_bytes.decode('ascii')
```

{% endtab %}

{% tab title="PHP" %}

```php
<?php
 $auth_str = "email:password";
 $base64_str = base64_encode($auth_str);
 
 $url = 'https://blowhorn.com/api/customer/auth';
 $ch = curl_init();
 curl_setopt($ch,CURLOPT_URL,$url);   
 curl_setopt($ch, CURLOPT_HTTPHEADER, array(
      'Content-Type: application/json',
      'Authorization: ' . $base64_str)
  );
  $result = curl_exec($ch);
  
  $data = json_decode($result);
  $api_key_string = $data->api_key;
  $api_key = base64_decode($api_key_string);
  ?>
```

{% endtab %}
{% endtabs %}