Overview

The SPORTident Center REST API provides a minimal, simple and efficient interface to interact with SPORTident Center.

The API is currently in Beta, which means that it could still change in an incompatible way after we receive feedback and opinions from early adaptors. We will inform all current users, should the API change.

Using the API

Authentication

All requests to the API need to be authorised. The user authenticates with his or her API key via the HTTP header apikey. The API key is available via the Center Admin Frontend: My Account > API key.

HTTP compression

SPORTident Center supports HTTP compression on upload (POST method) and download (for all methods, but only for content-type "application/json", "text/xml" and "text/csv").

To upload gzip-compressed data to the server, the client needs to set the header Content-Encoding: gzip.

To request a gzip-compressed response, the client may set the header Accept-Encoding: gzip. The response may or may not be compressed, which is indicated by whether the Content-Encoding: gzip header is set in the response or not. Very small payloads are not compressed.

Resources

Events

Retrieve punches for an event

Resource URL

GET /api/rest/v1/public/events/{eventId}/punches

Description

Retrieve punches for an event. The event id is available via the Center Admin Frontend: Events > Event > Settings.

The punches can be retrieved as JSON or CSV formatted data. The requested format has to be specified in the Accept header of the request.

Filtering of the punches is possible with the query parameters afterId and limit as listed below.

Typically, to retrieve punches "live" for a running event, you would poll the REST API in a loop (e.g. every ten seconds), starting with afterId=0 (punch ids are always greater than zero) and then increasing afterId to the so far largest returned punch id in each iteration (the returned punches are ordered ascending by punch id).

Simple punch format
Field Description

id

Uniquely identifies this punch

card

SPORTident card number (SIID)

time

Punch time (local time) in milliseconds since the Epoch (1970-01-01 00:00:00)

code

Control code

mode

Punch mode (e.g. Control, Start, Finish, BcControl, etc)
Query parameters
Parameter Description

afterId

(Optional) Get all punches after this id.

limit

(Optional) Return a maximum number of [limit] punches. Default is 50000. Largest possible value is 50000 as well.

projection

(Optional) Return punches in the specified punch format. Currently only "simple" is supported which is the default as well.
Request headers
Name Description

apikey

API key to authenticate the user

Accept

Return punches in the specified format. Acceptable values are "application/json" and "text/csv".

Content-Type

application/json;charset=UTF-8
Response headers
Name Description

X-Count

Returned number of punches, Total number of selected punches
Examples
Curl request to get punches as JSON
$ curl 'https://center-origin.sportident.com/api/rest/v1/public/events/159/punches?afterId=6529&projection=simple&limit=5' -i -X GET \
    -H 'Accept: application/json' \
    -H 'apikey: a882fa67-3fe6-d11c-1f61-7cd2ef8d56e5' \
    -H 'Content-Type: application/json;charset=UTF-8'
Retrieve punches as JSON with parameter afterId

Request:

GET /api/rest/v1/public/events/159/punches?afterId=6529&projection=simple&limit=5 HTTP/1.1
Accept: application/json
apikey: a882fa67-3fe6-d11c-1f61-7cd2ef8d56e5
Content-Type: application/json;charset=UTF-8
Host: center-origin.sportident.com

Response:

HTTP/1.1 200 OK
Vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
X-Count: 5,95
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Set-Cookie: SESSION=ZDhmZjdmMDItNWZlMC00M2VmLTk4ZGMtNGM3OTE4YzlkMjg0; Path=/; HttpOnly; SameSite=Lax
Content-Encoding: gzip
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Date: Mon, 11 Mar 2024 22:52:05 GMT
Keep-Alive: timeout=60
Connection: keep-alive
Content-Length: 522

[ {
  "id" : 6530,
  "card" : 8888893,
  "time" : 1710201099261,
  "code" : 49,
  "mode" : "BcControl"
}, {
  "id" : 6531,
  "card" : 8888894,
  "time" : 1710201100265,
  "code" : 50,
  "mode" : "BcControl"
}, {
  "id" : 6532,
  "card" : 8888895,
  "time" : 1710201101269,
  "code" : 51,
  "mode" : "BcControl"
}, {
  "id" : 6533,
  "card" : 8888896,
  "time" : 1710201102273,
  "code" : 52,
  "mode" : "BcControl"
}, {
  "id" : 6534,
  "card" : 8888897,
  "time" : 1710201103277,
  "code" : 53,
  "mode" : "BcControl"
} ]
JSON access denied response
HTTP/1.1 403 Forbidden
Vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Set-Cookie: SESSION=NjU1MWUzN2UtZWJmZC00NTIxLWExN2YtMjI2NDlmNTE2M2Vl; Path=/; HttpOnly; SameSite=Lax
Content-Encoding: gzip
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Date: Mon, 11 Mar 2024 22:52:38 GMT
Keep-Alive: timeout=60
Connection: keep-alive
Content-Length: 409

{
  "errors" : [ {
    "entity" : "AccessDeniedException",
    "cause" : "AccessDeniedException",
    "message" : "User 'firstNametestuser2 lastNametestuser2' is not authorised to access event '2581'",
    "detailMessage" : "User 'firstNametestuser2 lastNametestuser2' is not authorised to access event '2581'",
    "url" : "https://center-origin.sportident.com/api/rest/v1/public/events/2581/punches"
  } ]
}
Retrieve punches as CSV

Request:

GET /api/rest/v1/public/events/159/punches?projection=simple&limit=5 HTTP/1.1
Accept: text/csv
apikey: a882fa67-3fe6-d11c-1f61-7cd2ef8d56e5
Host: center-origin.sportident.com

Response:

HTTP/1.1 200 OK
Vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
X-Count: 5,100
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Set-Cookie: SESSION=ODVjNjM2ODUtYTBlMC00NGU2LWJkOTctMTBmZTdlYjdjMmRh; Path=/; HttpOnly; SameSite=Lax
Content-Encoding: gzip
Content-Type: text/csv;charset=UTF-8
Transfer-Encoding: chunked
Date: Mon, 11 Mar 2024 22:52:05 GMT
Keep-Alive: timeout=60
Connection: keep-alive
Content-Length: 223

ID,CODE,CARD,TIME,MODE
6525,44,8888888,1710201094238,BcControl
6526,45,8888889,1710201095242,BcControl
6527,46,8888890,1710201096250,BcControl
6528,47,8888891,1710201097253,BcControl
6529,48,8888892,1710201098257,BcControl