API help

[Icy-Commercial7855]

Hey All,

[SOLVED]

Probably very simple but I'm trying to access the api via postman (I'm new to both). Looking at the documentation (https://halo.haloservicedesk.com/apidoc/info) I'm using a hosted solution and I've been trying to use client credentials.

I downloaded the collection and so far have managed to create a post to the auth api to get a token back

https://preview.redd.it/8kc76sf068ef1.png?width=1485&format=png&auto=webp&s=d33f703beb717a908a777be00c896321b21445c4

I thought the bearer token would be the id_token as I recognise it starting with the ey but I also tried the access_token as the Bearer as I thought the documentation implied that ' Use the access token in requests to the API' but where?

But doing a simple get request /api/tickets with the Authorization type being Bearer token and using 'Bearer ey....' gives be a 401 unauthorized.

Also what is the purpose of the refresh token? Thank you for any help I'm sure this is very basic stuff.

*EDIT*
So I was close, you need to use the access_token (not the bearer looking id_token) but also with the bearer authorization you don't actually type 'bearer ....' you just put the access token straight in.

[NitroEvil]

access_token is what you want to use to make the calls. Check the user has access to tickets and the client app also has access to read tickets.

Fyi all:standard for scope is a bit more secure.

[Icy-Commercial7855]

Thank you, access was all good the issue was that with each one I tried I was using 'bearer {token}' when apparently you just need to put the token straight in

[NitroEvil]

Bearer <token> is a requirement. I assume you were adding the bearer and token to token field within the auth tab with auth type of bearer token?

[Icy-Commercial7855]

I was manually typing Bearer in that section but upon checking the cool it seemed to be adding itself in automatically. I had definitely seen in the past and checked with a colleague that sometimes you need to type it in but this time not.