Skip to main content

Authentication

Breakwater uses Clerk for user authentication and session management.

Web Application​

Browser-based access uses Clerk's session cookies automatically. No additional configuration needed.

API Access​

For programmatic API access, include the Clerk session token in the Authorization header:

curl -H "Authorization: Bearer YOUR_clerk-session-token" \
  https://breakwater.techgonecoastal.com/api/v1/sites

Collector Authentication​

Collectors authenticate using a site-specific token:

curl -H "Authorization: Bearer YOUR_site-collector-token" \
  https://breakwater.techgonecoastal.com/api/v1/collector/heartbeat

Site tokens are generated during site setup and can be rotated from the site settings.

Gateway Authentication​

Gateways authenticate using their provisioned credentials (gateway ID + encrypted tunnel). API calls from gateways are authenticated by source IP verification against the registered encrypted tunnel IP.