HTTP / JSON protocol

Authentication

On a single connection (i.e. keep-alive connection) you need to authenticate successfully just once. All requests after that will ignore any user credentials passed and will use the ones from the successful authentication.

More details about the authentication here.

Initially connections open to the server have quite low inactivity timeout. However once you authenticate over the connection the timeout will be quite long (over an hour).