Dashboard user token

Authenticate with User Credentials

curl --request POST \
  --url https://api.telemax.com.au/api/authentication/token/user \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data username=john_doe@email.com \
  --data password=secure_password123

import requests

url = "https://api.telemax.com.au/api/authentication/token/user"

payload = {
    "username": "john_doe@email.com",
    "password": "secure_password123"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/x-www-form-urlencoded"
}

response = requests.post(url, data=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/x-www-form-urlencoded'
  },
  body: new URLSearchParams({username: 'john_doe@email.com', password: 'secure_password123'})
};

fetch('https://api.telemax.com.au/api/authentication/token/user', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.telemax.com.au/api/authentication/token/user",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => "username=john_doe%40email.com&password=secure_password123",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/x-www-form-urlencoded"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.telemax.com.au/api/authentication/token/user"

	payload := strings.NewReader("username=john_doe%40email.com&password=secure_password123")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/x-www-form-urlencoded")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.telemax.com.au/api/authentication/token/user")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/x-www-form-urlencoded")
  .body("username=john_doe%40email.com&password=secure_password123")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.telemax.com.au/api/authentication/token/user")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/x-www-form-urlencoded'
request.body = "username=john_doe%40email.com&password=secure_password123"

response = http.request(request)
puts response.read_body

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 86399
}

{
  "type": "AUTHENTICATION",
  "code": "TOKEN_EXPIRED",
  "description": "The access token has expired. Request a new token using /api/authentication/token/user or /api/authentication/token/api-key.",
  "requestId": "req_7f3a2b1c",
  "docUrl": "https://docs.telemax.com.au/errors#token-expired"
}

{
  "type": "RATE_LIMIT",
  "code": "RATE_LIMIT_EXCEEDED",
  "description": "Too many requests. Wait 30 seconds before retrying.",
  "requestId": "req_6d2f8b4a",
  "docUrl": "https://docs.telemax.com.au/errors#rate-limit"
}

{
  "type": "SERVER_ERROR",
  "code": "INTERNAL_ERROR",
  "description": "An unexpected error occurred. Please try again or contact support with the requestId.",
  "requestId": "req_1e5a3c7d",
  "docUrl": "https://docs.telemax.com.au/errors#server-error"
}

POST

api

authentication

token

user

Authenticate with User Credentials

curl --request POST \
  --url https://api.telemax.com.au/api/authentication/token/user \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data username=john_doe@email.com \
  --data password=secure_password123

import requests

url = "https://api.telemax.com.au/api/authentication/token/user"

payload = {
    "username": "john_doe@email.com",
    "password": "secure_password123"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/x-www-form-urlencoded"
}

response = requests.post(url, data=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/x-www-form-urlencoded'
  },
  body: new URLSearchParams({username: 'john_doe@email.com', password: 'secure_password123'})
};

fetch('https://api.telemax.com.au/api/authentication/token/user', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.telemax.com.au/api/authentication/token/user",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => "username=john_doe%40email.com&password=secure_password123",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/x-www-form-urlencoded"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.telemax.com.au/api/authentication/token/user"

	payload := strings.NewReader("username=john_doe%40email.com&password=secure_password123")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/x-www-form-urlencoded")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.telemax.com.au/api/authentication/token/user")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/x-www-form-urlencoded")
  .body("username=john_doe%40email.com&password=secure_password123")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.telemax.com.au/api/authentication/token/user")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/x-www-form-urlencoded'
request.body = "username=john_doe%40email.com&password=secure_password123"

response = http.request(request)
puts response.read_body

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 86399
}

{
  "type": "AUTHENTICATION",
  "code": "TOKEN_EXPIRED",
  "description": "The access token has expired. Request a new token using /api/authentication/token/user or /api/authentication/token/api-key.",
  "requestId": "req_7f3a2b1c",
  "docUrl": "https://docs.telemax.com.au/errors#token-expired"
}

{
  "type": "RATE_LIMIT",
  "code": "RATE_LIMIT_EXCEEDED",
  "description": "Too many requests. Wait 30 seconds before retrying.",
  "requestId": "req_6d2f8b4a",
  "docUrl": "https://docs.telemax.com.au/errors#rate-limit"
}

{
  "type": "SERVER_ERROR",
  "code": "INTERNAL_ERROR",
  "description": "An unexpected error occurred. Please try again or contact support with the requestId.",
  "requestId": "req_1e5a3c7d",
  "docUrl": "https://docs.telemax.com.au/errors#server-error"
}

Overview

Authenticates a dashboard user by username and password and returns a signed JWT with UserId, CompanyId, and TimeZone claims.

A V2 version of this endpoint is available: User token. New integrations should prefer V2.

Endpoint

POST /api/Authentication/token/user

Authentication

Not required (public endpoint).

Request headers

Header	Required	Description
Content-Type	Yes	`application/x-www-form-urlencoded`

Request body (form)

string

required

Telemax account username (same as web login).

string

required

Account password.

Example request body

UserName=integration.reader@acmefleet.com.au&Password=K7mP2vL9qW4nR8xT

Response

200 OK — JwtTokenResponse

string

Bearer token for subsequent API calls.

string

Always bearer.

number

Token lifetime in seconds (float).

Example response

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJDb21wYW55SWQiOiIxMiIsIlVzZXJJZCI6ImExYjJjZDQwLWU1ZjYtNDc4OS1hYmNkLWVmMDEyMzQ1Njc4OSIsIlRpbWVab25lIjoiQXVzdHJhbGlhL1N5ZG5leSIsIm5iZiI6MTcxMjQ4MDAwMCwiZXhwIjoxNzEyNTY2NDAwLCJpYXQiOjE3MTI0ODAwMDAsImlzcyI6Imh0dHBzOi8vbG9jYWxob3N0OjcyOTkiLCJhdWQiOiJodHRwczovL2xvY2FsaG9zdDo3Mjk5In0.signature",
  "token_type": "bearer",
  "expires_in": 86399.0
}

Error responses

Status	Meaning
401	Invalid username or password, or user has no company assignment

curl -X POST "https://api.telemax.com.au/api/Authentication/token/user" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  --data-urlencode "UserName=integration.reader@acmefleet.com.au" \
  --data-urlencode "Password=K7mP2vL9qW4nR8xT"

await fetch("https://api.telemax.com.au/api/Authentication/token/user", {
  method: "POST",
  headers: { "Content-Type": "application/x-www-form-urlencoded" },
  body: new URLSearchParams({
    UserName: "integration.reader@acmefleet.com.au",
    Password: "K7mP2vL9qW4nR8xT",
  }),
});

requests.post(
    'https://api.telemax.com.au/api/Authentication/token/user',
    data={
        'UserName': 'integration.reader@acmefleet.com.au',
        'Password': 'K7mP2vL9qW4nR8xT',
    },
)

Authorizations

Authorization

string

header

required

JWT Bearer token obtained from POST /api/authentication/token/user or POST /api/authentication/token/api-key.

Lifetime: ~24 hours (86,399 seconds). Cache the token and reuse it. Re-authenticate 5 minutes before expiry.

Scoping:

User tokens are scoped to a single company.
API key tokens may restrict access to a vehicle allowlist and/or action set (see token claims).

No refresh endpoint — re-authenticate with your credentials when the token expires.

Headers

Content-Type

string

Standard and must keep it as it is.

Body

application/x-www-form-urlencoded

username

string

required

Username

Example:

"john_doe@email.com"

password

string

required

Password

Example:

"secure_password123"

Response

Successful response

access_token

string

JWT access token

Example:

"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."

token_type

string

Example:

"Bearer"

expires_in

number<float>

Token lifetime in seconds. Default is 86399.0 (≈24 hours). Cache and reuse this token until near expiry — do not request a new token per API call.

Example:

86399

Getting Started

Guides

Authentication

Companies & fleet

Telemetry & replay

Alerts

Insights & diagnostics

Vehicle commands

Operations & health

Reference

Overview

Endpoint

Authentication

Request headers

Request body (form)

Example request body

Response

Example response

Error responses

Authorizations

Headers

Body

Response

​Overview

​Endpoint

​Authentication

​Request headers

​Request body (form)

​Example request body

​Response

​Example response

​Error responses

Authorizations

Headers

Body

Response

Overview

Endpoint

Authentication

Request headers

Request body (form)

Example request body

Response

Example response

Error responses