Overview of OAuth 2.0 in APSIS One's APIs
APSIS One uses the OAuth 2.0 protocol to authorize its API calls. OAuth is the standard authorization framework that secures the access to protected API resources, both for web and desktop applications, by allowing the creation of access tokens. Read more about OAuth on their website.
In order to access APSIS One API, you must obtain access credentials. These credentials are known as access tokens, which are opaque strings that inform the API service that the bearer of the token has been authorized.
To obtain an access token, you must have first created an API key in your APSIS One account. Upon creation, APSIS One will generate a client ID and client secret, which are needed to obtain the access token.
The client ID is a publicly exposed string used by APSIS One's APIs to identify the application you created. The client secret confirms the identity of your application when attempting to access an API resource, so its important that the client secret is kept private between your application and the API.
What's Next?