name: developer-platform-authentication
title: Moody's Analytics Developer Platform Authentication
description: >-
  Acquire and refresh a bearer token for the Moody's Analytics developer
  platform using OAuth2 client credentials, with HMAC signing as a fallback
  for legacy product APIs.
provider: moodys-corporation
api: moodys-analytics-developer
version: 0.1.0

inputs:
  - name: client_id
    type: string
    required: true
    description: API client ID issued by Moody's Analytics.
  - name: client_secret
    type: string
    required: true
    description: API client secret issued by Moody's Analytics.
  - name: scope
    type: string
    required: false
    description: Optional space-separated scope list.

outputs:
  - name: access_token
    type: string
    description: Bearer token used on subsequent requests.
  - name: expires_in
    type: integer
    description: Token lifetime in seconds.

operations:
  - operationId: getAccessToken
    method: POST
    path: /oauth2/token

failure_modes:
  - code: invalid_client
    description: Client credentials rejected.
  - code: rate_limited
    description: Token endpoint rate-limited; back off and retry.