Authentication
Information about authentication to access API’s
The main API for the Core platform supports OAuth2 authentication.
There 2 methods for authentication:
- Login with username and password
- Login using a client id and secret (recommended for application integration)
Username - Password
To use this method first a token need to be retrieved with a login request.
POST /v1/login
{
"username": "string",
"password": "string"
}The response contains a bearer token and the expiration time in seconds. This token can then be put as a Bearer token in the request headers of each API call. When the token expires a new token need to be requested with the username and password.
OAuth 2: Client ID - Secret
To use this authentication method, you need a client ID and secret for your application and an access token url. If you don't have this yet, you can send a request to your account manager.
Using an OAuth2 supported client (eg Postman) you can provide the following:
- Grant Type: client_credentials
- client_id
- client_secret
- Token URL
Your client will then automatically put the Bearer token in the request headers.
The retrieved token will expire with a certain amount of time, so after expiration time a new access token need to be requested.
