The AlphaTouch API is designed to allow developers to use their own back-end applications or processes to synchronize with to, or perform actions on a particular AlphaTouch Installation. The AlphaTouch API consists of two technological aspects that may need to be dealt with for a complete integration.
An API is an application programming interface - in short, it's a set of rules that lets programs talk to each other, exposing data and functionality across the internet in a consistent format. REST stands for Representational State Transfer. This is an architectural pattern that describes how distributed systems can expose a consistent interface.
When people use the term 'REST API,' they are generally referring to an API accessed via HTTP protocol at a predefined set of URLs. These URLs represent various resources - any information or content accessed at that location, which can be returned as JSON, HTML, audio files, or images. Often, resources have one or more methods that can be performed on them over HTTP, like GET, POST, PUT and DELETE.
API Call requests must come from an IP address that is whitelisted in each of your Installations' management portal (in the API section). An API Call request will be declined if the installation in question does not have the request's originating IP address whitelisted. Please make sure you list all server IP addresses in the whitelist if the server will be making API requests.
The Whitelist for each installation can be located in the API Section of the installation's management portal.
Each AlphaTouch Installation has a unique API Key, which is accessible in the API Area of the Installation Management Portal (you must have API Permissions). You will need to store the API Key for each installation your are integrating with.
The API Key is to be included in the header of each of your API Calls so the AlphaTouch API knows which installation you are performing an API Call on.
/* Example API call To fetch a list of system administrators. Notice how the request is sent with the Unique API Key in the Header Parameters. */
curl --request GET
--header 'api-key: UNIQUE_API_KEY'
--header 'accept: application/json'
The API Key will also be sent to your Webhook endpoint so you can determine which installation the incoming data is in reference to.
/* Example Data packet sent to your server's webhook endpoint by the AlphaTouch servers when a resident is deleted. Notice how the data contains the Unique API Key, as well as some other information about an event that took place on AlphaTouch. */
Important Notes Regarding API Keys
- It is essential that you keep your API Keys private. Having any one of them fall into the wrong hands would be considered a security breach. If an API Key should become compromised, the API Key can be reset in the API section of the Installation Management Portal.