# Authenticaton Bearer Token local web api

**URL:** <https://community.homey.app/t/authenticaton-bearer-token-local-web-api/7102>\
**Category:** Developers\
**Created:** [January 17, 2019, 9:30am UTC](https://community.homey.app/t/authenticaton-bearer-token-local-web-api/7102 "2019-01-17T09:30:35Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![TTXy](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/ttxy/32/11223_2.png) [@TTXy](https://community.homey.app/u/TTXy)\
**Post date:** [January 17, 2019, 9:30am UTC](https://community.homey.app/t/authenticaton-bearer-token-local-web-api/7102/1 "2019-01-17T09:30:35Z")

</div>

Hello,

I am trying to connect to the local web api ([http://LOCAL-IP/api/manager/devices/device/](http://LOCAL-IP/api/manager/devices/device/)) to retrieve some data and I have seen several posts that the api uses “Bearer Token” for authentication.

So first off, is this still the correct way for api authentication after upgrading to v2.0? If so, where can I find my “Bearer Token” ?

Thanks for all help 😉

---

<div class="post-metadata">

**Author:** ![itshows](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/itshows/32/9204_2.png) [@itshows](https://community.homey.app/u/itshows)\
**Post date:** [January 18, 2019, 8:44pm UTC](https://community.homey.app/t/authenticaton-bearer-token-local-web-api/7102/2 "2019-01-18T20:44:05Z")

</div>

use chrome or firefox  
goto homey developer site. ([https://developer.athom.com/](https://developer.athom.com/))  
goto tools menu on the left

 ![developer](https://us1.discourse-cdn.com/flex025/uploads/athom/original/2X/d/d47f088a8eb38d5eed626beccb602b4d4d10d741.jpeg)  
press f12 for developer console in browser  
in homey developer click devices in the left menu and look for the second get in the browsers developers screen.  
look for headers on the right and authorization in the right middle  
 ![bearer](https://us1.discourse-cdn.com/flex025/uploads/athom/original/2X/5/592bc0f0c2702bc30c15d94f6290241c02dfcd2f.jpeg)  
there is your bearer (very long string)

---

<div class="post-metadata">

**Author:** ![Erik](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/erik/32/9865_2.png) [@Erik](https://community.homey.app/u/Erik)\
**Post date:** [January 18, 2019, 10:16pm UTC](https://community.homey.app/t/authenticaton-bearer-token-local-web-api/7102/3 "2019-01-18T22:16:12Z")

</div>

Or use these: [https://developer.athom.com/api/projects](https://developer.athom.com/api/projects)

---

<div class="post-metadata">

**Author:** ![itshows](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/itshows/32/9204_2.png) [@itshows](https://community.homey.app/u/itshows)\
**Post date:** [January 18, 2019, 11:06pm UTC](https://community.homey.app/t/authenticaton-bearer-token-local-web-api/7102/4 "2019-01-18T23:06:38Z")

</div>

client secret is not the bearer code  
client id your homey id as in [https://homey-id.connect.athom.com](https://homey-id.connect.athom.com)

---

<div class="post-metadata">

**Author:** ![Jeffrey\_van\_Norden](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jeffrey_van_norden/32/12808_2.png) [@Jeffrey\_van\_Norden](https://community.homey.app/u/Jeffrey_van_Norden)\
**Post date:** [June 29, 2019, 7:19am UTC](https://community.homey.app/t/authenticaton-bearer-token-local-web-api/7102/5 "2019-06-29T07:19:31Z")

</div>

Does anyone have an automatic way of retrieving this token?  
Or, even better, a way to renew a token?

---

<div class="post-metadata">

**Author:** ![Robin\_van\_Kekem](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robin_van_kekem/32/8187_2.png) [@Robin\_van\_Kekem](https://community.homey.app/u/Robin_van_Kekem)\
**Post date:** [July 9, 2019, 10:17am UTC](https://community.homey.app/t/authenticaton-bearer-token-local-web-api/7102/6 "2019-07-09T10:17:45Z")

</div>

I’ve been following [this tutorial](https://community.homey.app/t/unsupported-homey-v2-rest-api/7268/47).  
The one thing I couldn’t automate (using Node Red currently, flow available, just PM me) is step 2.  
He already discussed this in [this post](https://community.homey.app/t/unsupported-homey-v2-rest-api/7268/49) on step 2b.

However I was succesfull in receiving my personal refresh token by manually going through step 1-3.  
Been using the refresh token for a week in my Node Red flow succesfully.
