Authorization flow for access tokens

All API requests must include a valid access token. This token encodes information about the scopes the user has authorized and determines which API operations your application is allowed to perform on the user’s behalf.

Here’s a summary of the steps involved in the OAuth authorization flow using expiring access tokens:

Prerequisites


REST API OAuth authorization code flow

Here’s a summary of the steps involved in the authorization flow for access tokens:

  1. Create authorization request link
  2. Request user for authorization
  3. Exchange authorization code with access token
  4. Use access token for REST API requests
  5. Get new access token using refresh token
    1. (Optional) Get access token context
    2. (Optional) Revoke token