Most of the Tonido HTTP APIs require that a profile is logged in and the current HTTP session is authenticated.
Once the HTTP Session is authenticated, a cookie is returned by the Tonido server. This cookie will have to be returned by the HTTP session for the server to recognize the client as authenticated.
To first figure out the current authentication status, one can call getauthenticationinfo. This indicates whether the profile is logged into Tonido, and if yes, what profile is currently logged in. This also indicates if the current HTTP session is authenticated.
If the profile is not logged in, one can login into a specific profile, by invoking loginprofile.
If the profile is being logged in from a remote location, there is an additional step where you will have to correctly answer the secret answer before being allowed to login.
To clear the authentication for a given session, you can call locksession.
API Documentation: