Authentication

The Transport API uses OAuth2 Client Credentials Flow. All API endpoints require a valid Bearer token in the request headers.

Getting a Token

Request an access token using your client credentials. We will provide the clientId and clientSecret during onboarding.

curl --location --request POST 'https://sign-stag.auth.eu-west-2.amazoncognito.com/oauth2/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Authorization: Basic {clientId:clientSecret base64}' \
--data-urlencode 'grant_type=client_credentials'

The response includes a JWT access token valid for 1 hour:

{
"access_token": "eyJraWQ...",
"expires_in": 3600,
"token_type": "Bearer"
}

Using the Token

Include the token in the Authorization header of every API request:

Authorization: Bearer {your_access_token}

Where to Find Your Credentials