Quickstart
Make your first authenticated API call in minutes
Authentication
Learn how JWT tokens and permissions work
API Reference
Explore every endpoint with request and response details
Core Concepts
Understand profiles, modules, and the permission model
How it works
Log in to get a token
Send your credentials to
POST /api/Auth to receive a JWT Bearer token. All subsequent requests must include this token in the Authorization header.Explore your permissions
Call
GET /api/Usuario/mi-perfil to see your profile and GET /api/Menu to retrieve the modules your profile has access to.Manage users and profiles
Use the Profiles, Users, and Permissions endpoints to set up your organizational structure and assign fine-grained access to each team member.
Key features
JWT authentication
Stateless Bearer token auth with a 30-minute expiration. Includes Cloudflare Turnstile captcha validation on login.
Role-based access control
Permissions are scoped per module with five granular actions: agregar, editar, eliminar, consultar, and detalle.
Dynamic menu
The
GET /api/Menu endpoint returns only the modules a user’s profile is authorized to access.Image uploads
User avatars are uploaded as Base64 strings and stored in Cloudinary, automatically resized to 200×200 pixels.