Authentication

The Data Submission API uses OAuth for authentication. An access token must be obtained from the STR Identity Server. The access token should be included as a Bearer token in the HTTP headers of the Data Submission API request. The scope of the request should be called "datasubmission". A "client id" and "client secret" will be provided by STR for making the access token request to the STR Identity Server.

By default, a new access token is required for each API request. The lifetime of the access token can be extended by contacting STR.

The token endpoint for STR Identity Server is: https://identity.str.com/connect/token.

Example HTTP Request

POST https://identity.str.com/connect/token HTTP/1.1
Accept:application/json
Content-Type:application/x-www-form-urlencoded

grant_type=client_credentials&
scope=datasubmission&
client_id=dataloading_client1&
client_secret=secret

Note: Line breaks added and form encoding removed for readability.

Next topic: Message Headers