Page History

...

• When requesting a token, the Client ID and the Client Secret will be sent as Basic Authentication as default, but you can also use client_secret_post as client-authentication-method so it will be sent in the body.
• Since 17.2 it is also possible to send along custom parameters when requesting a token, see Connections Properties
• When requesting a token, the POST method is used.

• In the token response, we expect a JSON structure that at least contains an access_token and a token_type:

  Code Block
  language js
  { "access_token": "f608a968-b1ef-457a-8d1a-71ee007ac4d2", "token_type": "bearer" }

• Access tokens are not cached. Each Rest Service call will request a new token.

...