API Authorization

Access Token

To ensure the security of API calls, HENGSHI API adopts the highest security interaction model in OAuth2: Access Token.

How secure is the Access Token:

• First, the Client ID and Client Secret required to apply for a Token must be issued by a system administrator role.
• Second, the Token has an expiration period, which is 12 hours.
• Additionally, if a leak is discovered, the Token can be immediately revoked.

Operation Steps

Open the Settings -> API Authorization page to perform CRUD operations on API authorization.

Create Client ID and Client Secret

Select Add Authorization, enter the authorization name in the pop-up window, and click OK to generate the Client ID and Client Secret.

Check Enable Sudo to allow users to call the API of any user within the system using that user's identity.

Select an API authorization, and the copy buttons will appear at the clientID and clientSecret locations. Click to obtain the required clientID and clientSecret.

Obtain Access Token

See Obtain Token