Authentication

The Veronese JSON API uses Bearer token authentication. All requests must include a valid API access token in the Authorization header.

Creating an API token

1. Go to Settings → API Access in your Veronese account.
2. Click Generate new token.
3. Copy the token — it is shown once and cannot be retrieved again.

You can also create a token via the API:

curl -X POST https://veronesebook.com/api_access_tokens.json \
  -H "Authorization: Bearer YOUR_EXISTING_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"api_access_token": {"name": "My token"}}'

Making authenticated requests

Include your token in every request:

curl https://veronesebook.com/dashboard.json \
  -H "Authorization: Bearer YOUR_TOKEN"

Response format

All API responses use a consistent envelope.

Success:

{
  "success": true
}

Error:

{
  "success": false,
  "error": {
    "code": "unauthorized",
    "message": "Invalid or expired token",
    "details": {}
  }
}

Common error codes

Code	HTTP status	Meaning
unauthorized	401	Missing or invalid token
forbidden	403	Valid token but insufficient permissions
not_found	404	Resource does not exist
unprocessable_entity	422	Validation failed
payment_required	402	Insufficient credit balance

Token management

• Tokens do not expire automatically.
• You can delete a token at any time from Settings or via the Tokens API.
• A deleted token is immediately revoked — all requests using it return 401.