Public API for
ALCS has public API for receiving trucks GPS data from GPS providers.
In order to provide GPS data to ALCS system, GPS provider has two options:
Submit data to ALCS service.
Implement GPS providing service using ALCS API specifications so ALCS system could request GPS provider for required data.
Services are protected. In order to submit or provide data, both parties must provide authentication credentials.
API services are implemented as REST web services. POST method must be used by GPS provider for submit data to ALCS. GET method must be implemented by GPS provider to allow ALCS request GPS data.
All network communication conducted using HTTPS (TLS/SSL).
API uses access token (API key) for authentication.
Access token (API key)
Party that accepts request provide counterparty with access token. The method for generation access token may vary and depends on service provider.
ALCS uses such approach for generation access token:
- One provider can have more than one access token in a time.
- Access token is unique across the whole system.
- Provider may request new access token.
- Access token is used both for identification and authentication.
Party providing data is responsible for proper caller authorization, it means that only data that the caller has privilege to access, will be provided upon request.