Skip to content

Authenticate API calls⚓︎

All INVERS REST APIs use the OAuth 2.0 protocol for authentication and authorization. This tutorial shows how to get an access token which is needed to make calls to the INVERS APIs. The examples show how to use curl to get an access token and then make an authorized API call with it.

Create a client⚓︎

In order to access the INVERS API from your application, you need a client for your application. If you do not have one, learn how to create a client. This only has to be done once for your application.


Obtain an access token⚓︎

Let’s assume the following values for your OAuth 2.0 client credentials. Be sure to replace them with your values:

  • client_id: EXFL29#cl1
  • client_secret: eescrt8md3ntefkd…8m

Example (access token)⚓︎

Get an access token with your client’s credentials:

curl -X POST \
  '' \
  -u 'EXFL29#cl1:eescrt8md3ntefkd…8m' \ # (1)!
  -H 'Content-Type: application/json'
  1. Insert your combination of client_id and client_secret, separated by a : character.

The response from the authorization endpoint contains the access token.

  "access_token" : "eyJraWQiO…(truncated)…M2VhNtYWE3",
  "token_type" : "bearer",
  "expires_in" : 900

The access token can be used for subsequent calls to the REST APIs. It expires after 15 minutes as indicated by the number of seconds in the expires_in property.

Use access token in API calls⚓︎

Now it is time for the first real API call: Let’s get a list of vehicles in your fleet from the API. Be sure to replace ❰access_token❱ with the value in access_token from the previous step.

Example (API call)⚓︎

Get list of vehicles:

curl -X GET '' \ # (1)!
  -H 'Authorization: Bearer ❰access_token❱' \ # (2)!
  -H 'Content-Type: application/json'
  1. This example simply returns a list of your fleet’s vehicles. Passing the access_token works the same for all resources of the INVERS OneAPI.
  2. Insert your access_token as bearer.

If the request has been successful, a JSON object is returned along with HTTP status code 200. If there are vehicles in your fleet, the response contains a list of these vehicles.

Use the access token multiple times

Once you have the access token, be sure to use it for any subsequent calls in the next minutes. In other words: Do not get a new access token for every single API call.

It is recommended to wrap your REST API calls in a way that a new access token is automatically fetched if the existing token will expire in less than 2 minutes.