Authentication

APIs use OAuth 2.0 Client Credentials flow for authentication. See RFC 6749 for the standard specification.

Required Header

Authorization: Bearer {access_token}

Example Token Request

POST /oauth/token
Content-Type: application/x-www-form-urlencoded

grant_type=client_credentials&
client_id={client_id}&
client_secret={client_secret}

Example Token Response

{
  "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 3600,
  "scope": "locations:read locations:write"
}