Device Player (GUI)
Base URL
Every path below is relative to https://api.laksonoteknologi.com/v2.
Applies to every endpoint on this page
Accept-Languageheader (or?lang=query param, which wins if both are sent) picks the response/error locale - optional, falls back to the server's configured default if neither is sent.- Successful responses are
{"response_code":"001", "response_text":"Success", "data": {...}}.
Device Player Login
/v2/device-player/auth/logincommandAuthenticates a device player (kiosk/screen hardware, not a human actor) using its client_id/client_secret pair, ported unchanged from v1. Returns an opaque session token, NOT a JWT - it carries no claims of its own and doesn't go through the Casbin permission system at all, it's just a DB-backed session lookup on every subsequent request.
Headers
Content-Type: application/json
Accept-Language: en (optional - defaults to server config, or use ?lang= instead)Requires
"command": "device-player-login"in the request body.
Request fields
| Field | Source | Type | Required | Validation |
|---|---|---|---|---|
data.client_id | body | string | true | required |
data.client_secret | body | string | true | required |
Example
Device Player Logout
/v2/device-player/auth/logoutcommandRevokes the caller's own device player session token immediately (no request body needed) - the device stops being able to authenticate with it right away.
Headers
Authorization: Bearer <token>
Content-Type: application/json
Accept-Language: en (optional - defaults to server config, or use ?lang= instead)Device Player Refresh
/v2/device-player/auth/refreshcommandRotates a device player's current opaque session token into a new one. Unlike the human-actor providers, device_player has no separate refresh token concept - the same single token doubles as both, and the one being rotated is exactly the one being replaced.
Headers
Content-Type: application/json
Accept-Language: en (optional - defaults to server config, or use ?lang= instead)Requires
"command": "device-player-refresh"in the request body.
Request fields
| Field | Source | Type | Required | Validation |
|---|---|---|---|---|
data.token | body | string | true | required |
Example
Device Player Validate
/v2/device-player/auth/validatecommandChecks whether the caller's opaque device player session token is still valid (no request body needed) - a lightweight health-check a kiosk can call periodically to know whether it needs to re-authenticate, without waiting to find out the hard way on its next real request.
Headers
Authorization: Bearer <token>
Content-Type: application/json
Accept-Language: en (optional - defaults to server config, or use ?lang= instead)