Authorization

Requests to the ORP API’s need to be authorized. Wolfpack adopted the OAuth2.0 protocol to authenticate request to the API. To request a bearer token the client credentials flow will be used. See the diagram below for the flow diagram of the client credentials flow.

Authorization endpoints

Orp has two authorization endpoints to obtain tokens.

The example below shows how to request an access token.

curl <https://{host}/idapp/identityserver/connect/token> -X POST \
--basic --user "{client_id}:{client_secret}" \
-d "grant_type=client_credentials" -d "scope={scope}"

The example below shows a test API call with an access token.

    curl -X GET --header 'Accept: application/json' \
    --header 'Authorization: Bearer eyJhbGciOiJSUzI1…' \
    https://{host}/v1/Health

The client_id, client_secret and scope needed to get an authorization token can be requested at your account manager at wolfpack. The access token must be included in requests by adding a HTTP Authorization header.