Access Token

Returns your access token for making API calls.

POST https://api.formdr.com/api/oauth/token

Headers

Name	Type	Description
Content-Type	String	application/x-www-form-urlencoded

Request Body

Name	Type	Description
grant_type*	String	"password" or "client_credentials"
username*	String	Account Email (required if grant_type=password)
password*	String	Account Password (required if grant_type=password)
client_id*	String	Your Client ID
client_secret*	String	Your Client Secret
scope*	String	"read" | "write" | "edit" or combination separated by commas. ie: "read,write,edit"

200: OK

{
    "accessToken": String,
    "accessTokenExpiresAt": DateString,
    "refreshToken": String,
    "refreshTokenExpiresAt": DateString,
    "scope": String
}

You must first get your access token and attach this access token as a bearer token to all of your calls.

Bash example:

# replace ***** by your client id and secret
curl --location 'https://api.formdr.com/api/oauth/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Accept: application/json' \
--data-urlencode 'grant_type=client_credentials' \
--data-urlencode 'client_id=******' \
--data-urlencode 'client_secret=*****' \
--data-urlencode 'scope=read,write,edit'

Due to security protocols, access tokens have a limited lifespan.

If you are using an app instance that is not inside US, you will need a different host. For example, if you are using https://app.formdr.co.uk/, your api host will be https://api.formdr.co.uk/api

Test Keys

After you're ready, and upon approval, we will enable access for you to create an app which can be used for testing. You'll know if you are still in testing if you are given "TEST" keys when making the call to get your access tokens.