Authentication

Security implementation is based on the final version of OAuth 2.0 authorization framework, with a grant type of client_credentials. Every DocFusion API request requires an access_token as part of the authentication header.

POST https://{your_server_url}/core/connect/token
content-type: application/x-www-form-urlencoded

client_id={your_client_id}
&client_secret={your_client_secret}
&grant_type=client_credentials
&scope=DocFusion
&resource=DocFusion

Response 

{
   "access_token": "{your_access_token}",
   "expires_in": 3600,
   "token_type": "Bearer"
}

For every API request, include the {your_access_token} in the header as follows:

Authorization: Bearer {your_access_token}