Using Security Token with REST API

[vu_phan]

How do I pass Security Token instead of user credentials in REST API call?

[vu_phan · Accepted solution]

You can try the following steps.

• Make a login() call using SOAP API to generate the security token
• Pass 'ZSession' + the security token as Authorization key in the call's header

[ls-zuora]

if the service does not respond with proper error messages but only with the unhelpful {"message":"An unexpected error occurred"}

we only could fix this behaviour by doing a login-call like described here. this did some internal reset-foo and nice error-messages appeared again.

we did not actually use the security-token generated from login() at all - we just called login() for the sake of resetting something internal.