Authentication
How to get your access token, based on OAuth 2.0 grants
All API requests must be authenticated. To get authorized, you must include a valid access token in the Authorization header:
Authorization: Bearer your-access-token
To get an access token, you need to execute an authorization flow by using a valid application as the client.
The authorization flow depends on the grant type as described in the table below:
Grant type | Sales channel | Integration | Webapp |
Client credentials | ​✅​ | ​✅​ | ​ |
Password | ​✅​ | ​ | ​ |
Refresh token | ​✅​ | ​ | ​✅​ |
Authorization code | ​ | ​ | ​✅​ |
For security reasons, access tokens expire after 2 hours.
Last updated 4 months ago