Authentication

Authenticate server-side requests with a scoped organisation API key.

Authorization header

GET /v0/jobs HTTP/1.1
Host: api.luranta.com
Authorization: Bearer lur_...
Accept: application/json

curl --request GET \
  --url "https://api.luranta.com/v0/jobs" \
  --header "Authorization: Bearer $LURANTA_API_KEY" \
  --header "Accept: application/json" \
  --get \
  --data-urlencode "roles=software-engineering" \
  --data-urlencode "locations=London" \
  --data-urlencode "experience[min]=3" \
  --data-urlencode "experience[max]=8" \
  --data-urlencode "workArrangements=hybrid" \
  --data-urlencode "workArrangements=remote"

Scopes

Scope	Allows
jobs:read	List and retrieve jobs
companies:read	List and retrieve companies

Key lifecycle

Name every key for its workload.
Grant only required scopes.
Rotate before expiry.
Revoke immediately after suspected exposure.
Never use API keys as browser sessions.