Get an Access Token

In order for your app to begin making API calls, you must first obtain an access token.

Gobo serves as an OAuth 2.0-compliant authorization server, and issues access tokens to apps for accessing your API(s).

What is OAuth?

OAuth is an open standard for access delegation, commonly used as a way for Internet users to grant websites or applications access to their information on other websites but without giving them the passwords. – Whitson Gordon

OAuth2 Authorization Grants

An authorization grant is a credential representing the resource owner’s authorization (to access its protected resources) used by the client to obtain an access token. – RFC6749

The OAuth framework specifies several grant types for different use cases. Gobo supports two of the grant types for accessing your API(s):

• Client credentials - for access on behalf of an app

• Authorization code - for access on behalf of a customeruser

Only access tokens obtained via the authorization code flow will contain a user claim.