# Authentication

<a id="ckeditor-cloud-services-rest-api">

## CKEditor Cloud Services REST API

The REST API uses HMAC Authentication. It means that every request must include a signature and a timestamp.\
The signature needs to be created in accordance with the requirements mentioned in the [Request signature](../security/request-signature.md) guide.

<a id="examples">

### Examples

Detailed examples for Node.js and other programming languages can be found in the [Request Signatures examples](../../examples/security/request-signature-nodejs.md) section.

<a id="converters-apis">

## Converters APIs

Converters APIs use JWT to authenticate requests. The generated token should be placed as `Authorization` header.

<a id="example">

### Example

The token should be generated based on the example below:

```js
const jwt = require( 'jsonwebtoken' );

	const accessKey = 'w1lnWEN63FPKxBNmxHN7WpfW2IoYVYca5moqIUKfWesL1Ykwv34iR5xwfWLy';
	const environmentId = 'LJRQ1bju55p6a47RwadH';

	const payload = {
		aud: environmentId
	};

	const token = jwt.sign( payload, accessKey, { algorithm: 'HS256', expiresIn: '24h' } );

	console.log( 'Authentication token', token );
```

> **Note**
>
> For **On-premises** the `payload` field should be empty and the `accessKey` field should be replaced with the value set as `SECRET_KEY` while configuring the server.
>
> You will find more detailed information in the dedicated sections of the [Export to PDF On-Premises](../../onpremises/pdf-onpremises/authorization.md#request-example-with-an-authorization-header) and [Import and Export to Word On-Premises](../../onpremises/docx-onpremises/authorization.md#request-example-with-an-authorization-header) guides.

Please keep in mind that token generation should be done on a backend side, to avoid exposing `accessKey` to public.\
Anyone who gets the `accessKey` is able to use converters using your subscription.

More detailed examples for Node.js and for other programming language can be found in a [Token endpoints examples](../../examples/token-endpoints/nodejs.md) section.

<a id="next-steps">

## Next steps

Read more about the overall [System security](../../guides/system-security.md).

---

Full index of the Cloud Services documentation: [llms.txt](../../../llms.txt)