In order to make calls to the Contit API, a bearer token issued by the authorization server using the OAuth2 protocol must be used.
The endpoint is available via POST method at https://id.contit.cloud/connect/token and it is necessary to use the Client Credentials Flow. The client_id and client_secret is generated by the management panel at the address https://app.contit.cloud in the Client API section.
The issued access token is valid for one hour. Once it has expired, it will be necessary to obtain the new access token as described above.
Example of request access token by Authorization Server:
curl -X POST -d "client_id=id&client_secret=secret&grant_type=client_credentials" https://id.contit.cloud/connect/token
Example of response with the access token:
{
"access_token": "b4dc1410-6b15-4a7c-bd22-1abea1f0fa3a",
"token_type": "bearer",
"expires_in": 3600
}