---
updatedAt: 2026-05-12T16:11:13.000Z
agentTools:
  projectIndex: https://docs.joinforage.app/llms.txt
---

# Authentication Token Reference

Endpoints and SDK methods that require Forage bearer tokens.

[Authenticate with Forage](https://docs.joinforage.app/docs/authentication) covers step-by-step token generation. For a conceptual overview of how the two token types work, see [Understanding Forage Authentication](https://docs.joinforage.app/docs/authentication-concepts).

## Token constraints

| Token type           | Lifetime      | Scope                          | Limit                                                   |
| -------------------- | ------------- | ------------------------------ | ------------------------------------------------------- |
| Authentication Token | Up to 30 days | Server-side only in production | 1000 active tokens per Client ID and Client Secret pair |
| Session Token        | 15 minutes    | Front-end requests             | One per checkout session                                |

Authentication tokens are revoked via [`/o/revoke_token/`](https://docs.joinforage.app/reference/revoke-authentication-token) (single) or [`/o/bulk_revoke/`](https://docs.joinforage.app/reference/bulk-revoke-auth-tokens) (bulk).

## Endpoints that require authentication tokens

* [Create a Fully Hosted Session](https://docs.joinforage.app/reference/create-session): POST `/sessions/`
* [Create a Custom Payment Capture Session](https://docs.joinforage.app/reference/create-capture-session): POST `/capture_sessions/`
* [Update an Order](https://docs.joinforage.app/reference/update-order): PATCH `/orders/{order_ref}/`
* [Cancel an Order](https://docs.joinforage.app/reference/cancel-order): POST `/orders/{order_ref}/cancel/`
* [Create a refund for an entire Order](https://docs.joinforage.app/reference/refund-entire-order): POST `/orders/{order_ref}/refund_all/`
* [Create a refund for part of an Order](https://docs.joinforage.app/reference/refund-partial-order): POST `/orders/{order_ref}/refunds/`
* [Retrieve all refunds for a given Order](https://docs.joinforage.app/reference/get-all-order-refunds): GET `/orders/{order_ref}/refunds/`
* [Retrieve a Refund for a given Order](https://docs.joinforage.app/reference/get-an-order-refund): GET `/orders/{order_ref}/refunds/{refund_ref}`
* [Update a Payment Method](https://docs.joinforage.app/reference/update-payment-method): PATCH `/payment_methods/{payment_method_ref}/`
* [Create a Payment for a given Order](https://docs.joinforage.app/reference/create-order-payment): POST `/orders/{order_ref}/payments/`
* [Update an OrderPayment](https://docs.joinforage.app/reference/update-an-order-payment): PATCH `/orders/{order_ref}/payments/{payment_ref}/`
* [Cancel an OrderPayment](https://docs.joinforage.app/reference/cancel-an-order-payment): POST `/orders/{order_ref}/payments/{payment_ref}/cancel`
* [Update a Payment](https://docs.joinforage.app/reference/update-a-payment): PATCH `/payments/{payment_ref}/`
* [Create a refund for a given Payment](https://docs.joinforage.app/reference/create-payment-refund): POST `/payments/{payment_ref}/refunds/`
* [Retrieve a report](https://docs.joinforage.app/reference/reports): GET `/reporting/{report_type}`

> 📘 **Flexible token acceptance**
>
> Some endpoints can accept either a session token or an authentication token in the `Authorization` header. Consult the reference documentation for the specific endpoint to confirm what bearer token type is required.

## SDK methods that require session tokens

### Android

* [`tokenizeEBTCard`](https://android.joinforage.app/forage-android/com.joinforage.forage.android.ecom.services/-forage-s-d-k/tokenize-e-b-t-card)
* [`checkBalance`](https://android.joinforage.app/forage-android/com.joinforage.forage.android.ecom.services/-forage-s-d-k/check-balance)
* [`capturePayment`](https://android.joinforage.app/forage-android/com.joinforage.forage.android.ecom.services/-forage-s-d-k/capture-payment)

### iOS

* [`tokenizeEBTCard`](https://ios.joinforage.app/classes/foragesdk#/s:9ForageSDK0A10SDKServiceP15tokenizeEBTCard18foragePanTextField10customerID8reusable10completionyAA0a7PANTextI0C_SSSbSgys6ResultOyAA18PaymentMethodModelVyAA0aE0VGs5Error_pGctF)
* [`checkBalance`](https://ios.joinforage.app/classes/foragesdk#/s:9ForageSDK0A10SDKServiceP12checkBalance18foragePinTextField22paymentMethodReference10completionyAA0a7PINTextI0C_SSys6ResultOyAA0E5ModelVs5Error_pGctF)
* [`capturePayment`](https://ios.joinforage.app/classes/foragesdk#/s:9ForageSDK0A10SDKServiceP14capturePayment18foragePinTextField16paymentReference10completionyAA0a7PINTextI0C_SSys6ResultOyAA0E5ModelVs5Error_pGctF)

### Forage JS

* [`Forage(ForageConfig)`](https://docs.joinforage.app/reference/initialize-forage-js#forageconfig-fields)

# Sibling pages

* [Understanding Forage Authentication](https://docs.joinforage.app/docs/authentication-concepts.md)
* [Sign up for Forage](https://docs.joinforage.app/docs/sign-up-for-forage.md)
* [Register an App](https://docs.joinforage.app/docs/register-an-app.md)
* [Authenticate with Forage](https://docs.joinforage.app/docs/authentication.md)
* [Webhooks Overview](https://docs.joinforage.app/docs/configure-webhooks.md)