Shoeboxed / api

Official API documentation for integrating with Shoeboxed https://www.shoeboxed.com
14 stars 5 forks source link

More information on implicit grant flow #18

Open PierrickPuimeanChieze opened 8 years ago

PierrickPuimeanChieze commented 8 years ago

I am trying to developp a personnal productivity tool using Shoeboxed API, but it seems that only the authorization code is documented. More information about the implicit grant flow would be nice.

Also, more information on the expected header of the request would be nice, instead of curl command.

igstan commented 8 years ago

Implicit flow is pretty simple, but we'll add short docs about it, too. You need to issue an initial request to

https://id.shoeboxed.com/oauth/authorize?response_type=token&client_id=...&redirect_uri=...&scope=all

Fill in the ellipses with the appropriate client_id and redirect_uri values. After the user authorizes your request, the browser will be redirected back to the redirect_uri you've given and a fragment that looks similar to the following:

$REDIRECT_URI/#access_token=9a3d2571-1f47-44b3-8931-0d8ade4ea028&token_type=bearer&expires_in=1800&scope=all

You can then grab the access token from the fragment part of the URL and use it in request by setting this header:

Authorization: Bearer 9a3d2571-1f47-44b3-8931-0d8ade4ea028
PierrickPuimeanChieze commented 8 years ago

Thanks a lot