English

No description in the specification.

2 operations
POST /authentication/oauth2/revoke RevokeToken

Revoke access token

Revoke an access token.

Request body

application/x-www-form-urlencoded · optional

The token that we want to revoke.

RevokeTokenRequestBody

Responses

  • 200 No response body. Token was successfully revoked, or the token was invalid (i.e. it was already 'revoked').
Error responses: 400 — See the shared contract on the version page.
POST /authentication/oauth2/token AuthenticateClient

Authenticate client

Authenticate the client to obtain a token. It is recommended that the returned token is a JWT as this can come in handy if any part of the API, e.g. the search API, needs to be delegated to a third party. The JWT could be used to ensure that only authorized clients have access to the third party API.

Request body

application/x-www-form-urlencoded · optional

The authentication client credentials.

AuthenticationClientCredentialsRequestBody

Responses

Error responses: 400 · 401 — See the shared contract on the version page.