Client Credentials

This procedure is for gaining access to protected resources, that are not associated with a resource owner.

The first step here is to obtain an access token. This is done by making a POST request to,

https://iris.nitk.ac.in/oauth/token

POST Parameters to be sent along

• You can use the HTTP_Authorization header to pass encoded client credentials
• You can also pass the client credentials as query parameters.

{
	grant_type - "client_credentials"
	client_id - The Client ID provided to you by IRIS during signup
	client_secret - The Client Secret provided by IRIS, while registering your app
}

Response

• access_token - The access token for accessing protected data

This access_token can now be used for further API queries.

Examples

Using HTTP Authorization header:

# Ruby
# Using HTTP_Authorization Header
require 'httparty'
response = HTTParty.post('https://iris.nitk.ac.in/oauth/token',
                         query: { 'grant_type' => 'client_credentials' },
			             headers: { 'Authorization' => "Basic #{Base64.urlsafe_encode64("<CLIENT_ID>:<CLIENT_SECRET>")}" })
puts response['access_token'] #=> <access_token valid for 2 hours>

// JS
// Using HTTP_Authorization Header
const axios = require('axios');
response = axios.post({
	'url': '/oauth/token',
	'baseURL': 'https://iris.nitk.ac.in/',
	'headers': { 'Authorization': `Basic ${btoa('<CLIENT_ID>:<CLIENT_SECRET>')}` },
	'params': { 'grant_type': 'client_credentials' }
});
console.log(response['access_token']);

# Python
# Using HTTP_Authorization Header
import base64
import requests

requests.post('https://iris.nitk.ac.in/oauth/token',
              params = { 'grant_type': 'client_credentials' },
			  headers = { 'Authorization': 'Basic %s' (base64.b64encode(b'<CLIENT_ID>:<CLIENT_SECRET>')) })

Using query parameters:

# Ruby
# Using query parameters
require 'httparty'
response = HTTParty.post('https://iris.nitk.ac.in/oauth/token',
                         query: { 'grant_type' => 'client_credentials', 'client_id' => '<CLIENT_ID>', 'client_secret' => '<CLIENT_SECRET>' })
puts response['access_token'] #=> <access_token valid for 2 hours>

// JS
// Using query parameters
const axios = require('axios');
response = axios.post({
	'url': '/oauth/token',
	'baseURL': 'https://iris.nitk.ac.in/',
	'params': { 'grant_type': 'client_credentials', 'client_id': '<CLIENT_ID>', 'client_secret': '<CLIENT_SECRET>' }
});
console.log(response['access_token']);

# Python
# Using query parameters
import base64
import requests

requests.post('https://iris.nitk.ac.in/oauth/token',
              params = { 'grant_type': 'client_credentials', 'client_id': '<CLIENT_ID>', 'client_secret': '<CLIENT_SECRET>' })

• Note: Client Credential Flow is not yet supported for all APIs, so while an access token may be obtained, access is restricted for some APIs.