Authentication
- Priit Aavik
- Jurgita Krukonyte (Deactivated)
- Vaidotas Gailius
Ondato APIs use OAuth2 Access Tokens to authenticate each request.
To obtain Access Token - a post request must be done to our authorization server URL:
Production: https://id.ondato.com/connect/token
Request to the authorization server must use
'Content-Type: application/x-www-form-urlencoded'header and has to contain the following information in the body:
Key | Value | Description |
|---|---|---|
| <client_id> | Your ID that will be provided by Ondato. |
| <secret> | Your secret that will be provided by Ondato. |
| client_credentials | Machine-to-machine grant flow. |
| <reqested_scopes_separated_by_space> | Access to requested resources. This is an optional parameter: |
Discovery endpoint: https://id.ondato.com/.well-known/openid-configuration.
Example:
Authentication request example (production)
For in-depth reference see specification about authorization request and response.
curl --location --request POST 'https://id.ondato.com/connect/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'grant_type=client_credentials' \
--data-urlencode 'client_id=client_id_that_only_you_know' \
--data-urlencode 'client_secret=secret_that_only_you_know' \Related content