Connecting to the Auth Anywhere API

General Information

The Auth Armor API is a simple RESTful based API. HTTPS is required.

• API Swagger page: https://api.authanywhere.autharmor.com
• API SDKs, wrappers and libraries: 

API Access and Authentication

The Auth Armor API uses the Oauth2 Client Credentials flow to authenticate API calls.

For Oauth2 Client Credentials flow, you will need to request a bearer token from our Oauth2 server.

You will need to obtain a client_id and a client_secret to access the API. To do so, please visit the dashboard at https://dashboard.autharmor.com, select or create a project, then create an API client. For more information, see How to create API clients using the dashboard
Once you get a token back, you'll need to include the token in each API request. See the bottom of this page for more info.

• Auth Armor OAuth2 Server Token endpoint: https://login.autharmor.com/connect/token

Sample Token POST:

xxxxxxxxxx

POST /connect/token HTTP/1.1

Host: login.autharmor.com

Content-Type: application/x-www-form-urlencoded

Content-Length: [dynmaic]

client_id={your_client_id}&client_secret={your_client_secret}&

grant_type=client_credentials

Parameters:

Required:

• client_id
• client_secret

Optional:

• Scopes
  • aarmor.api.generate_invite_code
  • aarmor.api.request_auth

Sample with scopes:

x

POST /connect/token HTTP/1.1

Host: login.autharmor.com

Content-Type: application/x-www-form-urlencoded

Content-Length: [dynmaic]

client_id={your_client_id}&client_secret={your_client_secret}&

grant_type=client_credentials&scope={scopes_here_space_seperated}

Note:

If you do not specify any scopes, the default scopes enabled for the client will be used automatically.

Response

On a successful response, you will receive a Bearer token as well as expiration information about the token. This token needs to be included in the HTTP header for each API request. You can save the token locally if you wish until it expires. After a token expires, simply call the same API above to generate a new token.

Example:

Authorization: Bearer [tokenValueHere]