generated: '2026-07-27'
method: derived
source: openapi/hydro-ottawa-green-button-espi-openapi.yml
note: >-
  The source specification is authored by the Green Button Alliance, not by Hydro Ottawa,
  and the authorizationUrl and tokenUrl below belong to the GBA sandbox. Hydro Ottawa
  publishes no OAuth endpoints, no scope reference and no anonymously served OpenID Connect
  discovery document (see well-known/hydro-ottawa-well-known.yml). Hydro Ottawa's own
  description of Connect My Data — third party initiates, customer is redirected into Hydro
  Ottawa's Green Button authentication, customer selects data types, duration and frequency
  and may revoke at any time — matches the authorization-code model recorded here, but the
  concrete endpoints were NOT observed and none were invented. The customer-facing half of
  the flow is live at https://hydroottawa.savagedata.com/Connect/Authorize.
summary:
  types:
  - oauth2
  oauth2_flows:
  - authorizationCode
  - clientCredentials
schemes:
- name: oauth2
  type: oauth2
  flows:
  - flow: authorizationCode
    authorizationUrl: https://sandbox.greenbuttonalliance.org:8443/oauth/authorize
    tokenUrl: https://sandbox.greenbuttonalliance.org:8443/oauth/token
    scopes: 0
  - flow: clientCredentials
    tokenUrl: https://sandbox.greenbuttonalliance.org:8443/oauth/token
    scopes: 0
  sources:
  - openapi/hydro-ottawa-green-button-espi-openapi.yml