Thermo Fisher Scientific Authentication API

openapi: 3.2.0
info:
  title: Thermo Fisher SampleManager LIMS REST Authentication API
  description: The Thermo Scientific SampleManager LIMS REST API enables secure connection between software applications and the SampleManager Laboratory Information Management System for simplified data exchange. Provides access to sample data, workflows, entity browsing, results, and laboratory operations. Supports token-based authentication with hardened session handling.
  version: 21.3.0
  contact:
    name: Thermo Fisher Scientific Digital Solutions
    url: https://www.thermofisher.com/us/en/home/digital-solutions/lab-informatics.html
  license:
    name: Proprietary
    url: https://www.thermofisher.com
servers:
- url: https://{server}:{port}/smpwcfrestvgsm
  description: SampleManager LIMS REST API Server
  variables:
    server:
      description: The hostname of your SampleManager LIMS server.
      default: localhost
    port:
      description: The port the SampleManager WCF service runs on.
      default: '56105'
security:
- bearerAuth: []
tags:
- name: Authentication
  description: Token-based authentication operations.
paths:
  /mobile/login:
    post:
      operationId: login
      summary: Login
      description: Authenticates a user and returns a session token for subsequent API calls. Token must be included in the Authorization header.
      tags:
      - Authentication
      security: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/LoginRequest'
      responses:
        '200':
          description: Login successful. Returns session token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LoginResponse'
        '401':
          description: Invalid credentials.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /mobile/logout:
    post:
      operationId: logout
      summary: Logout
      description: Invalidates the current session token.
      tags:
      - Authentication
      responses:
        '200':
          description: Logout successful.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SuccessResponse'
        '401':
          description: Unauthorized or token already expired.
components:
  schemas:
    SuccessResponse:
      type: object
      properties:
        success:
          type: boolean
        message:
          type: string
    LoginResponse:
      type: object
      properties:
        token:
          type: string
          description: Session token for subsequent API calls.
        expires:
          type: string
          format: date-time
          description: Token expiration timestamp.
        username:
          type: string
          description: Authenticated username.
    ErrorResponse:
      type: object
      properties:
        error:
          type: string
        message:
          type: string
    LoginRequest:
      type: object
      required:
      - username
      - password
      properties:
        username:
          type: string
          description: SampleManager username.
        password:
          type: string
          description: SampleManager password.
        instance:
          type: string
          description: SampleManager instance name (if multiple instances).
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: Session token obtained from the /mobile/login endpoint. Pass as "Bearer {token}" in the Authorization header.