How to Authenticate with the La Krème Restaurant API

Authentication works differently depending on which API surface you are using. The Widget API is fully public. Every endpoint uses your {publicToken} directly in the URL path. This token identifies your restaurant and is safe to expose in client-side code.

GET https://api.lakreme.fr/api/v1/widget/{publicToken}/config

You do not need to send any headers or credentials. Anyone with your public token can call the Widget API, which is intentional — it powers your guest-facing booking page.

Restaurant API — JWT Bearer token required

Every endpoint under /api/v1/restaurant/ requires an Authorization header containing a valid JWT Bearer token. You obtain this token by signing in through La Krème’s login flow. After a successful login, your session includes an access_token — this is the JWT you pass to the API.

Sending your token

Include the token as a Bearer value in the Authorization header on every request:

Authorization: Bearer YOUR_JWT_TOKEN

Example with curl

curl https://api.lakreme.fr/api/v1/restaurant/me \
  -H "Authorization: Bearer YOUR_JWT_TOKEN"

For requests with a body, also set the Content-Type header:

curl https://api.lakreme.fr/api/v1/restaurant/me \
  -X PATCH \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"accent_color": "#e85d4a"}'

Token expiry

JWT tokens expire after a period of time. When your token expires, the API returns a 401 Unauthorized response. Re-authenticate through La Krème’s login flow to get a fresh token and retry the request.

Error responses

Status	Meaning
`401 Unauthorized`	Your token is missing, malformed, or expired. Re-authenticate to get a new token.
`403 Forbidden`	Your token is valid but you don’t have permission to access this resource. This typically means the resource belongs to a different restaurant account.

Overview

Widget API

Restaurant API

How to Authenticate with the La Krème Restaurant API

Widget API — no authentication required

Restaurant API — JWT Bearer token required

Sending your token

Example with curl

Token expiry

Error responses

​Widget API — no authentication required

​Restaurant API — JWT Bearer token required

​Sending your token

​Example with curl

​Token expiry

​Error responses

Widget API — no authentication required

Restaurant API — JWT Bearer token required

Sending your token

Example with curl

Token expiry

Error responses