Authorization Rules
NovoOne APIs use the OAuth 2.0 protocol for authentication and authorization. This topic describes the authorization process and the token expiration time.
The following contents show the process when application accessing the NovoOne API using OAuth 2.0.
- 1. Enable NovoOne API
- You need to enable the API feature on NovoOne Platform portal, and obtain the Client ID and Client Secret. For more information, see Enable NovoOne API.
- 2. Obtain access token
- Use the Client ID and Client secret to obtain an access token from NovoOne Authorization Server. For more information, see Get an Access Token.
- 3. Send the access token to an API
- After your application obtains an access token, add the token to the HTTP Authorization header when making API requests.
- 4. Refresh the access token if necessary
-
The access token becomes invalid in the following situations.
- The access token expires automatically 6 hours after issuance.
- The Client Secret on NovoOne Platform portal has been regenerated.
You need to call the Get an Access Token interface again to obtain a new access token to proceed.