Authorization

To access and interact with the One Record API, clients must authenticate using OAuth 2.0.

Authentication

Upon successful authentication, the API issues an access token that is required for making authorized API requests. This access token must be included in the header of each API request to verify the client’s identity and permissions.

Using the Access Token

Once an access token is obtained, it must be included in the Authorization header of all subsequent API requests in the following format:

Authorization: Bearer <access_token>

Example

GET /v1/shipment HTTP/1.1
Host: api.one-record.fr
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
Content-Type: application/json

Access Token Expiry

Access tokens are valid for a limited period of 1 hour. Once the access token expires, the client will no longer be able to make authorized API requests. To regain access, the client must request a new access token by repeating the OAuth 2.0 flow.