API Version: 1.9
The Authorization API allows you to authorize your API calls. It is required that you retrieve a valid access token for all calls to the account APIs. Public APIs do not require authorization.
In order to use API endpoints that require authroization, you need client credentials. If you do not already have client credentials, sign into your account and generate them.
The diagram below shows the authorization flow for the account APIs:
To authorize your API requests, send a POST
to the /auth/token
endpoint with your client_id
and client_secret
in the body, along with a grant_type
of client_credentials
. You will receive an access_token
back that should be used in the Authorization
header as a bearer token. View the endpoints below for examples.
Content-Type
application/json
200
OK
- Success.
401
MISSING_CREDENTIALS
- The request body is missing client_id
, client_secret
, or both.
401
CREDENTIALS_NOT_FOUND
- The credentials supplied are not valid.
401
INVALID_CREDENTIALS
- The credentials supplied are not valid.
401
REVOKED_CREDENTIALS
- The credentials supplied have been reboked and can no longer be used.
401
INVALID_GRANT_TYPE
- The grant_type
supplied is invalid. Should be client_credentials
.
401
INVALID_GRANT
- The access token supplied is invalid or another error occured.