{ "opencollection": "1.0.0", "info": { "name": "Public Account Pairing Endpoints Auth Endpoints API", "version": "v1" }, "items": [ { "info": { "name": "Auth Endpoints", "type": "folder" }, "items": [ { "info": { "name": "Otter Generate Token", "type": "http" }, "http": { "method": "POST", "url": "https://{public-api-url}/v1/auth/token", "body": { "type": "form-urlencoded", "data": [] } }, "docs": "Client credentials in the request-body and HTTP Basic Auth are supported." }, { "info": { "name": "Otter OAuth 2.0 Authorize Endpoint", "type": "http" }, "http": { "method": "GET", "url": "https://{public-api-url}/v1/auth/oauth2/authorize", "params": [ { "name": "client_id", "value": "store_123", "type": "query", "description": "The ID of the client (also known as the Application ID)." }, { "name": "redirect_uri", "value": "https://example.com/resource", "type": "query", "description": "The URI to where the user should be redirected when the flow is successfully completed. It must be previously registered at Developer Portal in the application settings." }, { "name": "response_type", "value": "string", "type": "query", "description": "Specifies the expected response type. Only \"code\" is accepted." }, { "name": "scope", "value": "string", "type": "query", "description": "The scope to request, multiple scopes are passed delimited by a space character." }, { "name": "state", "value": "string", "type": "query", "description": "Can be used to store request-specific data. The server will return the unmodified state value back to the application." }, { "name": "code_challenge", "value": "string", "type": "query", "description": "A code verifier generated by the client application transformed by applying a cryptographic hash function, such as SHA-256, and encoding the result using URL-safe Base64 encoding." }, { "name": "code_challenge_method", "value": "string", "type": "query", "description": "Method used to transform the code verifier. The most common method is \"S256\", which stands for SHA-256." } ] }, "docs": "Request a user's authorization to perform action on their behalf" } ] } ], "bundled": true }