Authentication & Authorization - Industrial PMR

Industrial PMR secures all RESTful endpoints, Cloud Functions, and WebSocket interfaces using token-based authentication.

Authenticating Requests

Include your access token in the Authorization header of every HTTP request:

curl -X GET "https://rest-middleware-01.industrialpmr.com/time" \
  -H "Authorization: Bearer <YOUR_ACCESS_TOKEN>" \
  -H "Accept: application/json"

Authentication Flow

Token Lifecycle & Security

Token Expiration: Access tokens are valid for 24 hours from issuance.
Scope Isolation: Tokens are scoped strictly to the user’s assigned factories and department permissions.
Role Enforcement:
- admin: Can perform write actions, reconfigure edge hardware, and manage users.
- supervisor: Can create/close targets, categorize downtime, and trigger shift reports.
- viewer: Read-only access to telemetry streams.