Security

The Tracr API uses OAuth 2.0 authentication. Tracr Support will provide a Client ID and Client Secret during the technical onboarding.

Keep your Client ID and Client Secret secure. They are provided by Tracr Support during technical onboarding.

Generate a JWT token

Call POST https://auth.tracr.com/oauth/token

request.json

{
  "client_id":"<client_id>",        
  "client_secret":"<client_secret>",
  "audience":"<api_url>",
  "grant_type":"client_credentials"
}

response.json

{
  "access_token": "<access_token>",
  "token_type": "Bearer"
}

To pass the token to the API, provide it in the Authorization header.

Authorization: <access_token>

This token must be sent in every request to the API.