Skip to main content
POST
Create authorization for a user

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/x-www-form-urlencoded
user_id
string

Internal user id (personId). Any user can use this endpoint with their own user_id, other use cases requires special permissions.

external_user_id
string

External user id (externalSourceId for person).

applicationId
string

Optional. Id of the client application the authorization code is for. When omitted, the user's own client application is used, falling back to the caller's. The X-Findity-ClientApplicationId header is used as a last fallback. An unknown id fails with 400 invalid_request "invalid applicationId", and an application the user may not use fails with 400 invalid_request "not authorized for this applicationId".

Response

OK

code
string

Authorization code that can be used in a request to /oauth/token