Authorization

Secrets

Please do not share your secrets with anyone else.

You have to be authorized to make any calls to our API. To authorize your API requests, you have to receive your secrets first:

  • OAuth Client Credentials

  • API Key

Please contact us, and we will provide you your personal secrets to access our API.

OAuth Client Credentials

We use OAuth Client Credentials to authorize clients. The Client Credentials are required to get an Access Token.

Client Credentials include:

  • Client ID

  • Client Secret

The Client Credentials are attached to a doo user, so you should have an account in doo and specify your account's email and organization to get the OAuth Client Credentials from us.

API Key

We use API Key to identify clients and manage API limits for each client. The API Key is required for every request to our API endpoints.

Our default API limits are the following:

  • 1000 requests per day;

  • 1 request per second.

The limits can be changed by request if required.

Get an Access Token

When you have the secrets, you can get Access Token using the API request described below. The Access Token is required to request most of our public API endpoints listed in this documentation.

Request

curl -X POST https://rest.doo.net/v1/oauth \ -H 'Content-Type: application/json' \ -H 'x-api-key: <api_key>' \ -d '{"client_id": "<client_id>", "client_secret": "<client_secret>", "grant_type": "client_credentials"}'

Parameters

Parameter

Required

Description

Parameter

Required

Description

<api_key>

Yes

See the documentation about the API Key above.

<client_id>

Yes

See the documentation about the OAuth Client Credentials above.

<client_secret>

Yes

See the documentation about the OAuth Client Credentials above.

Response example

{ "response_status": 200, "developer_message": "Success", "user_message": "Success", "data": { "access_token": "<access_token>", "refresh_token": null }, "_links": { "self": { "href": "https://rest.doo.net/v1/oauth" } } }