...

Status
colourYellow
titleENDPOINT Url
GET /api/v1/oauth/authorize

Query Parameters

...

Note

This step should NOT be done in the browser. Why? You have to pass your client_secret for getting the access_token.

At any cost, you should NOT expose your client_secret to your user.

Status
colourYellow
titleENDPOINT Url
POST /api

...

/oauth/token

Query Parameters

Name

Type

Description

client_id

string

Required. The client ID you received from Citesphere for your App.

client_secret

string

Required. The client secret you received from Citesphere for your App.

code

string

Required. The code you received as a response in the previous step

redirect_uri

string

The URL of the application you configured in Citesphere

state

string

The unguessable random string you provided (and received back) during the previous step.

grant_type

string

Required. Use authorization_code for retrieving anaccess_token.

For a list of values, check https://auth0.com/docs/applications/application-grant-types

...

Of course, you should pass client_id and client_secret similar to the previous request.

Status
colourYellow
titleENDPOINT Url
POST /api

...

/oauth/token

Query Parameters

Name

Type

Description

client_id

string

Required. The client ID you received from Citesphere for your App.

client_secret

string

Required. The client secret you received from Citesphere for your App.

refresh_token

string

Required. Use the refresh_token you got from the previous step.

Example: 0d06219a-1b49-7895-9220-ef3b9810f09d

grant_type

string

Required. Use refresh_token in this scenario

Example: POST /api

...

/oauth/token?client_id=OAUTHCLIENT007&client_secret=xyz&refresh_token=0d06219a-1b49-7895-9220-ef3b9810f09d&grant_type=refresh_token

Response

Code Block
languagejson
{
    "access_token": "c322172e-16ac-8952-95e7-19639745bbaf",
    "token_type": "bearer",
    "refresh_token": "0d06219a-1b49-7895-9220-ef3b9810f09d",
    "expires_in": 3600,
    "scope": "read"
}

...