API OAuth2

Get Authorization Token

post

https://api.d1.thalescloud.io/authz/v1https://api.d1-stg.thalescloud.io/authz/v1https://develop-api.d1-dev.thalescloud.io/authz/v1

/oauth2/token

This request is used by the Issuer backend to get a Thales authorization token.

Parámetros de encabezado

x-correlation-idstringOpcional

Random identifier which can be used to correlate the different API calls done as part of a single use-case. This identifier will be the one primarily used for troubleshooting.

Warning: This identifier should not be derived from sensitive personal data, as its value will be logged in clear.

There is no strong guarantee of the uniqueness of this identifier, so please refrain from using it for other purpose than logging and troubleshooting.

Pattern: ^[A-Za-z0-9_-]{1,64}$

Cuerpo

application/x-www-form-urlencodedapplication/json

grant_typestring · enumRequerido

Describes the flow.
In our case we have defined the JWT bearer flow, so you will have to set urn:ietf:params:oauth:grant-type:jwt-bearer

Valores posibles:

assertionstringRequerido

The assertion is the entire JWT value.
Please refer to Authorization flow for more details on how to generate this JWT.
The JWT must contain the following fields:

• iss: Issuer of the JWT. It shall be the issuerId and it will be used to lookup the onboarded public key.
• exp: The validity must be the expiration time of the assertion within 15 minutes, expressed as the number of seconds from 1970-01-01T0:0:0Z measured in UTC.

Supported alg: ES256.

Respuestas

200

Default allowed response

application/json

access_tokenstringOpcional

The access_token that will be used to call D1 Banking APIs.

Example: ey...HRT6LOON7w

expires_innumberOpcional

Remaining time in seconds for the access_token to expire.

Example: 900

scopestringOpcional

Scope of the access_token that will be used to call D1 Banking APIs.

Example: d1-api:account:full d1-api:consumer:read

token_typestringOpcional

Type of the access_token that will be used to call D1 Banking APIs.

Example: Bearer

400

Bad request

post

/oauth2/token

HTTPcURLJavaScriptPython

POST /authz/v1/oauth2/token HTTP/1.1
Host: api.d1.thalescloud.io
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 79

"grant_type='urn:ietf:params:oauth:grant-type:jwt-bearer'&assertion='text'"

application/x-www-form-urlencodedapplication/json

{
  "access_token": "ey...HRT6LOON7w",
  "expires_in": 900,
  "scope": "d1-api:account:full d1-api:consumer:read",
  "token_type": "Bearer"
}