{
  "opencollection": "1.0.0",
  "info": {
    "name": "Dexcom Developer Alerts Authentication API",
    "version": "v3"
  },
  "request": {
    "auth": {
      "type": "oauth2",
      "flow": "authorization_code",
      "authorizationUrl": "https://api.dexcom.com/v2/oauth2/login",
      "accessTokenUrl": "https://api.dexcom.com/v2/oauth2/token",
      "credentials": {
        "clientId": "{{clientId}}",
        "clientSecret": "{{clientSecret}}"
      }
    }
  },
  "items": [
    {
      "info": {
        "name": "Authentication",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Initiate OAuth 2.0 Authorization",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.dexcom.com/v2/oauth2/login",
            "params": [
              {
                "name": "client_id",
                "value": "",
                "type": "query",
                "description": "The application's registered client identifier."
              },
              {
                "name": "redirect_uri",
                "value": "",
                "type": "query",
                "description": "Registered redirect URI to which the authorization code is appended."
              },
              {
                "name": "response_type",
                "value": "",
                "type": "query",
                "description": "Must be set to `code` for authorization code flow."
              },
              {
                "name": "scope",
                "value": "",
                "type": "query",
                "description": "Must be `offline_access` (the only currently accepted value)."
              },
              {
                "name": "state",
                "value": "",
                "type": "query",
                "description": "Opaque value used to maintain state between request and callback (CSRF protection)."
              }
            ]
          },
          "docs": "Redirect the end user to the Dexcom hosted login page to obtain an authorization code. The user authenticates with Dexcom credentials and consents to share CGM data with the requesting application."
        },
        {
          "info": {
            "name": "Exchange Authorization Code for Tokens",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.dexcom.com/v2/oauth2/token",
            "body": {
              "type": "form-urlencoded",
              "data": []
            }
          },
          "docs": "Exchange a single-use authorization code for an access token and refresh token, or refresh an existing access token using a refresh token. Tokens must be stored on the partner's server."
        }
      ]
    }
  ],
  "bundled": true
}