Start session

POST https://api.authix.cc/start

Init IV parameter

1. Generate a random IV inside of your application on each application run.
2. Make sure to save it (in-memory) as it will be required to decrypt the first response.
3. Send the generated IV as a string

You will receive a response that looks like this:

Data decryption (this will be customized per-client later on)

1. md5 hash the generated IV
2. sha256 the md5 hash
3. Take the first 32 characters, that's the IV in hex format
4. Use the application secret key (from panel, it's the aes key in hex format) + this IV to decrypt the response, algorithm is aes-256-cbc

Decrypted data will look like:

JSON

{"session_id":"e0789017e5f4ea4719f60587f88529fb0ad7c7dec7bd8e9798002f26ccde7c32","expires_at":1706474842,"iv":"a5f1c175c2d61bdb73441e754dc7d107"}

• Save the session id, will be needed for all subsequent requests
• Expires at: When this session will expire (currently set to 5 minutes)
• IV: Save it, will be needed to decrypt all further responses, the first IV can be thrown away