Skip to navigation
Guides

Authentication

All endpoints use HTTP Basic authentication over HTTPS.

Credentials are issued per integration. Contact your Rush Order representative to request a set for your organization.

Sending credentials

Supply the username and password as a standard Authorization: Basic header. Most HTTP clients build this for you:

curl https://dream.rushorder.com/api/stock \
  --user "$RO_API_USER:$RO_API_PASSWORD"

Handling credentials

Keep credentials out of source control

Read them from environment variables or a secrets manager at runtime. Do not commit them, and do not place them in query strings, where they may be captured in server and proxy logs.

Requests without valid credentials are rejected. Rotate credentials by requesting a new set before retiring the old one, so your integration is never without working access.