Making API Calls

After receiving an access token, calls can now be made to your API(s) by passing the token in the authorization header of an HTTP request.

Example API Call

curl --header 'Authorization: Bearer $ACCESS_TOKEN' https://api.yourco.com/

For subscribers not utilizing Gobo proxies, the access token can also be passed by other means defined out-of-band as required by your system.

Depending on how Gobo is configured, the access tokens received by an app may either be JSON Web Token or an opaque string. Regardless of the type, all access tokens should be treated as opaque by app developers as there are no guarantees made to their contents.