Authentication¶
Authentication is handled using OAuth 2.0 Client Credentials Grant.
Token URLs:
| Environment | Endpoint URL |
|---|---|
| Test: | https://sfs-q-001.siemens-sfs.auth0app.com/oauth/token |
| Live (Production) | https://sfs-p-001.siemens-sfs.auth0app.com/oauth/token |
API Audiences:
| Environment | Audience |
|---|---|
| Test | https://api.siesmart.com/b2b |
| Production | https://api.siesmart.com/b2b |
Retrieve an access token¶
To be able to make any API calls, you will need to generate an access token:
POST {TOKEN_URL}
Content-Type: application/json
{
"audience": "{API_AUDIENCE}",
"grant_type": "client_credentials",
"client_id": "{YOUR_CLIENT_ID}",
"client_secret": "{YOUR_CLIENT_SECRET}"
}
A successful authorization request results in a response like the following:
HTTP/1.1 200 OK
Content-Type: application/json
{
"access_token": "eyJz93a...k4laUWw",
"token_type": "Bearer",
"expires_in": 86400
}
The field access_token contains the token which you use for performing requests to our APIs.
Hint
Tokens are valid for 12 hours so can be cached on your system. Please avoid a set-up that generates a new token for each request.