Setup and Authentication

On this page:

• Learn how to authenticate with eTrusted
• What next?

Important!

In other to authenticate you will need to create an API Client.

Your API credentials should include a client_id and a client_secret, with these credentials you should have access to the APIs.

Authentication

NOTE: For a more detailed guide on the authentication process please visit the authentication section of our API documentation.

Below is an example showing how you would authenticate using CURL:

      curl --location --request POST 'https://login.etrusted.com/oauth/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'client_id={client_id}' \
--data-urlencode 'client_secret={client_secret}' \
--data-urlencode 'grant_type=client_credentials' \
--data-urlencode 'audience=https://api.etrusted.com'

    

Also, it's best to keep your {client_id} and {client_secret} away from prying eyes by authenticating on the server-side.

On a successful request you get back a response payload similar to this:

      {
    "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJTVHpnYzZfTEM3ZHVnZkNoZVpoUzQyd0dNWVAyM0lBTUdkWGUtWTJrb3ZjIn0.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.dUuy0RXZjk0jyXH7X23JtJiID4ZYafVm1FPdh0Pv9xZHeZLQ1wn3xApwYr04IEhSZzcLWuTL0sJRrvXza24o4N8RkolBbfBiX1Vf_Dsj5YWczlhjd5yOsq-puvFW94-1XtjmFIvWWOV2zEraLYHxSc6UFvK6oCv99MvZecz_M1Hjo5-jHpwLWqVoC0d0v9rUhYcFT1ggw6aScO18CFpodz2P3851sZJj71Ldq7uq25y0IrNLXUabIPPCWZo5Cgfs_6NVIBB1L3y0ris8tXy0oZkg3CrdJT4O0QjEAwgpFl3RNNwwyGO7s4GKZCXfhfeHXkhzV8O29yoks-N-u22ljg",
    "expires_in": 300,
    "refresh_expires_in": 0,
    "token_type": "Bearer",
    "not-before-policy": 1642608920,
    "scope": "profile email"
}

    

In subsequent API calls, you need to include the access_token as a bearer token in the request header. For example, if you wanted to request the list of reviews it will look something like this:

      curl --location --request GET 'https://api.etrusted.com/reviews' \
--header 'Authorization: Bearer {access_token}'

    

What next?

Once you are able to generate the access_token, the tutorials section will be the next best place to visit. It is meant to provide a general overview of the APIs available.

You can also go ahead and explore the API documentation if you already have an idea in mind and just need the right call parameters!

To learn more about the key standards our authentication flow is based on checkout OAuth's official site and jwt.io.

Scroll back up