End-customer login
QUERY
https://api.studiointern.de/{customer_shortname}/v2/cust/login
Last modified:2026-07-30 13:06:00
Maintainer:Not configured
QUERY (not GET or POST). Send credentials in the request body asapplication/x-www-form-urlencoded or JSON. Rate-limited by IP and customer./v2/cust/* requires the tenant API key in header X-Api-Key — including login and logout.1.
QUERY /v2/cust/login): send session_id, user_id (customer number or email), and pw.On success the response contains
data.token and data.kID. The token is returned only oncein this response — store it securely on the client; it cannot be retrieved again.
2.
/v2/cust/* except login and logout): send the token in headerX-Customer-Token. No additional session_id or user_id is required.3.
GET /v2/cust/logout/{user_id}/{session_id}): ends the session; does not useX-Customer-Token.timeout as the session). Each authenticated request resets this countdown.
Request
Path Params
Body Params Required
application/json
Responses
Request Request Example
Shell
JavaScript
Java
Swift
curl --location --request QUERY 'https://api.studiointern.de//v2/cust/login' \
--header 'X-Api-Key: <api-key>' \
--header 'Content-Type: application/json' \
--data '{
"session_id": "stringstringstringstring",
"user_id": "string",
"pw": "pa$$word",
"pw_is_base64": true
}'Response Response Example
200 - Example 1
{
"success": true,
"code": 0,
"locale": "de",
"message": "string",
"data": {
"token": "string",
"kID": 0
},
"links": {},
"meta": {}
}Modified at 2026-07-30 13:06:00