Authorization

Authorization

This API implements OAuth2 as its main authorization protocol combined with OpenID Connect. Following RFC 6749 and Open ID Connect Core 1.0.

Register your client

In order to access the API you need to register your application as an OAuth client.
Check back soon for instructions on how to register your application

Choosing the right flow

authorization_code

For confidential clients it is recommended to use the authorization_code-flow for best security.
Using this flow, getting an access-token is a two-step process.

1. Getting an authorization_code
2. Exchanging the authorization_code for an access_token and a refresh_token

Endpoints used

• /oauth/authorize
• /oauth/token

refresh_token

The refresh_token-flow is used when refreshing an access_token using a refresh_token acquired by using the authorization_code flow.

Endpoints used

• /oauth/token