OAuth2 API

Get Authorization Token

post

https://api.d1.thalescloud.io/authz/v1https://api.d1-stg.thalescloud.io/authz/v1https://develop-api.d1-dev.thalescloud.io/authz/v1

/oauth2/token

This request is used by the Issuer backend to get a Thales authorization token.

ヘッダーパラメータ

x-correlation-idstringオプション

Random identifier which can be used to correlate the different API calls done as part of a single use-case. This identifier will be the one primarily used for troubleshooting.

Warning: This identifier should not be derived from sensitive personal data, as its value will be logged in clear.

There is no strong guarantee of the uniqueness of this identifier, so please refrain from using it for other purpose than logging and troubleshooting.

Pattern: ^[A-Za-z0-9_-]{1,64}$

本文

application/x-www-form-urlencodedapplication/json

grant_typestring · enum必須

Describes the flow.
In our case we have defined the JWT bearer flow, so you will have to set urn:ietf:params:oauth:grant-type:jwt-bearer

可能な値:

assertionstring必須

The assertion is the entire JWT value.
Please refer to Authorization flow for more details on how to generate this JWT.
The JWT must contain the following fields:

• iss: Issuer of the JWT. It shall be the issuerId and it will be used to lookup the onboarded public key.
• exp: The validity must be the expiration time of the assertion within 15 minutes, expressed as the number of seconds from 1970-01-01T0:0:0Z measured in UTC.

Supported alg: ES256.

レスポンス

200

Default allowed response

application/json

access_tokenstringオプション

The access_token that will be used to call D1 Banking APIs.

Example: ey...HRT6LOON7w

expires_innumberオプション

Remaining time in seconds for the access_token to expire.

Example: 900

scopestringオプション

Scope of the access_token that will be used to call D1 Banking APIs.

Example: d1-api:account:full d1-api:consumer:read

token_typestringオプション

Type of the access_token that will be used to call D1 Banking APIs.

Example: Bearer

400

Bad request

post

/oauth2/token

HTTPcURLJavaScriptPython

POST /authz/v1/oauth2/token HTTP/1.1
Host: api.d1.thalescloud.io
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 79

"grant_type='urn:ietf:params:oauth:grant-type:jwt-bearer'&assertion='text'"

application/x-www-form-urlencodedapplication/json

{
  "access_token": "ey...HRT6LOON7w",
  "expires_in": 900,
  "scope": "d1-api:account:full d1-api:consumer:read",
  "token_type": "Bearer"
}