OAuth
DS Server implements OAuth as the authorization method. Two flows are supported:
- Authorization Code
- Client Credentials
In order to use the Client Credentials flow, this method must be explicitly enabled in the admin portal of DS Server.
In both cases, a valid access token returned from the OAuth endpoints must be passed in a Bearer Authorization Header or as a Query Parameter.
Authorization Header
Description |
A Bearer authorization header (also called token authentication) contains the OAuth access token. The authorization method and a space i.e. "Bearer " is then put before your valid access token. For example:
Authorization: Bearer 4796E23054E64BC773CACBCAF24AD179DE9A3
|
Query Parameter
Description |
The access token is passed directly in the endpoint URL as a query string. For example:
?access_token=4796E23054E64BC773CACBCAF24AD179DE9A3
|