Authentication

Some Play.me API methods require user authentication. This means that you can (or must) call them providing a User Authentication Token.
 
You can retrieve the Token with user.login API, that returns:

<?xml version="1.0" encoding="UTF-8"?>
<response>
  <user>
   <token><![CDATA[&TOKEN_NAME=12345u7y]]></token>
   <credits>123</credits>
  </user>
</response>

 
As you can see, the Token is in the format:
 
&TOKEN_NAME=12345u7y
 
...and you can use the Token directly as a parameter. You don't need to worry about the Token name or about it's value, you just need to append the entire Token to the actual query string. Note that an ampersand (&) is already prep ended for your convenience.
 
 
Example:
 

http://api.playme.com/playlist.remove?playlistCode=123&TOKEN_NAME=12345u7y

 
 
The Token is valid for a hour starting from its generation or from the latest call that used it.
 
The Token can be safely used in every call, even when it's not needed.
 
Token is an unique (though temporary) user identifier, so it is good practice to avoid making the user Token publicly available (e.g. do not build links using it). Consider calling the Play.me API by server side components only or by client side embedded objects, such as Flash applications and so on.
 
Note that:

  • the term user means the final user that is using your application, not the developer: so credentials provided to the user.login api are user's credential, not developer's credential.
  • A valid user is a user registered to the playme site.

 
See Using an authenticated API for more on this topic.