# Authorization

## Host API

[https://api.digitoo.ai](https://api.digitoo.ai)

Create an account and organization at [www.digitoo.ai](https://www.digitoo.ai) or using the following endpoint.

Each workspace comes with a predefined service account user which has all of the necessary permissions to handle integration to third-party systems. The token can be either found in the app settings in the Accounting systems section, or it can be fetched via API: [Get workspace service token](/api-reference/workspaces#get-workspace-service-account-token-for-v2).

The service account token has no expiration and can thus be used indefinitely.

> **Note:** The service account has ADMIN permissions for the workspace, so it is not possible to use the service token for changing organization settings.

## API Endpoints

### Register

[Register Endpoint](https://api.digitoo.ai/api-v2-json/api/v2/auth/register) - POST

### Login

[Login Endpoint](https://api.digitoo.ai/api-v2-json/api/v2/auth/login) - POST  
Use email and password to get access and refresh tokens.

### Token Usage

Every request must contain an authorization token via the Authorization header:

```
Authorization: Bearer <TOKEN>
```

### Refresh Token

[Refresh Token Endpoint](https://api.digitoo.ai/api-v2-json/api/v2/auth/refresh) - POST

### Change Password

[Change Password Endpoint](https://api.digitoo.ai/api-v2-json/api/v2/auth/change-password) - POST

### Reset Password

[Reset Password Endpoint](https://api.digitoo.ai/api-v2-json/api/v2/auth/reset-password) - POST

### Password Change Token

[Password Change Token Endpoint](https://api.digitoo.ai/api-v2-json/api/v2/auth/password-change-token) - GET