Security

The Tracr API uses OAuth 2.0 authentication. Tracr Support will provide a Client ID and Client Secret during the technical onboarding.

MTLS support

For integrations done before 30/06/2023, please note that Tracr will continue to support mTLS until further notice. New integrations will be provided with OAuth 2.0 credentials only.

Generate a JWT token

Call POST https://auth.tracr.com/oauth/token

Request

{
  "client_id":"<client_id>",        
  "client_secret":"<client_secret>",
  "audience":"<api_url>",
  "grant_type":"client_credentials"
}

Response

{
  "access_token": "<access_token>",
  "token_type": "Bearer"
}

Pass the token to the endpoint

To pass the token to the API, provide it in the Authorization header.

Authorization: <access_token>

This token must be sent in every request to the API.