Authentication

QAF API calls require valid Authorization header for authentication and authorization. Qaf uses OAuth2 for getting an access_token

Our authentication service require API-KEY and API-SECRET informations. You can get these informations from Back Office Dashboard -> API Credentials menu

Client Authentication - Get Access Token

POST {{baseUrl}}/oauth/token

Headers

Name	Type	Description
Authorization*	String	Basic authorization with API-KEY and API-SECRET
Content-Type*	String	application/x-www-form-urlencoded

Request Body

Name	Type	Description
grant_type	String	client_credentials

200: OK

{
    // Response
}

401: Unauthorized

{
    // Response
}

Example

Response

{
    "access_token": "8a4511b6-9593-4508-bdfc-c9a3fd2be85c",
    "token_type": "bearer",
    "expires_in": 10799,
    "scope": "api",
    "authorities": [
        {
            "authority": "USER"
        }
    ]
}