OAuth 2.0

Start the authorization code flow

Picket's authorization server endpoint.

GEThttps://picketapi.com/api/v1/oauth2/authorize

Query parameters

Header parameters

Response

400401default

One or more arguments are invalid or required arguments are missing

Body

application/json

codeenum

invalid_requestinvalid_clientinvalid_grantunauthorized_clientunsupported_grant_type

msg*string

Human-readable text providing additional information

Request

JavaScriptCurl

const response = await fetch('https://picketapi.com/api/v1/oauth2/authorize', {
    method: 'GET',
    headers: {},
});
const data = await response.json();

Response

{
  "code": "invalid_request",
  "msg": "text"
}

Request a new access token.

Specification

The OAuth 2.0 token endpoint used in two cases:

• Authorization Code Grant with the [PKCE extension
• Resource Owner Password Credentials, adapted for wallet-based authentication

POSThttps://picketapi.com/api/v1/oauth2/token

Header parameters

Body

application/x-www-form-urlencoded

TokenRequest (one of)

authorization_codepassword

Response

200400401

New access token generated.

Body

application/json

accessToken*string

The access token value

tokenType*enum

Type of the token is set to "Bearer"

Bearer

expiresIn*integer (int32)

The lifetime in seconds of the access token

Request

JavaScriptCurl

const response = await fetch('https://picketapi.com/api/v1/oauth2/token', {
    method: 'POST',
    headers: {
      "Content-Type": "application/x-www-form-urlencoded"
    },
    body: JSON.stringify("grant_type=authorization_code& code=2addb9e34dcc427f05fefcb045327e8a& redirect_uri=https%3A%2F%2Fredirect.example.com%2Fcb& code_verifier=dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk"),
});
const data = await response.json();

Response

{
  "accessToken": "text",
  "tokenType": "Bearer"
}