# Introduction
This document describes the basic usage for:
- generating the JWT to securely initialise the user’s interface
- initialising the ECOOH Glooh Ads iFrame
- performing media creation status on the GloohAds API
All calls to the API will return the response as JSON.
# Security
For authentication purposes, each request to the API should have an Authorization header :
- For direct backend to backend access - a static authorization token can be provided to you by Glooh.
- As a user, each request to our backend needs to be authenticated via a JWT token.
- Before initialising the iFrame, a JWT token for the user needs to be generated server-side.
# Flow
