Create a JSON web token for Experience Edge APIs

Delivery API

To authorize your requests to the Delivery API, you must generate an Edge token and include it in every call to the API. You can generate an Edge token in any of the following ways:

• Using the Deploy app.
• Using the Deploy REST API. To do this, you must first request a JSON web token (JWT) for Experience Edge.
• Using the Token API. To do this, you must first request a JSON web token (JWT) for Experience Edge.

Token API and Admin API

To authorize your requests to the Token API or the Admin API:

1. Create an Edge administration client for an environment. This generates a client ID and client secret.
2. Request a JWT for Experience Edge using the client ID and client secret. This generates a JSON web token (JWT). You must include the JWT in the Authorization header of every API request you make.

JSON

curl -X POST 'https://auth.sitecorecloud.io/oauth/token' \\
-H 'Content-Type: application/json' \\
--data-raw '{
    "audience": "https://api.sitecorecloud.io",
    "grant_type": "client_credentials",
    "client_id": "<YOUR_CLIENT_ID>",
    "client_secret": "<YOUR_CLIENT_SECRET>"
}'

URL-encoded

curl -X POST 'https://auth.sitecorecloud.io/oauth/token' \\
-H 'content-type: application/x-www-form-urlencoded' \\
--data-urlencode 'audience=https://api.sitecorecloud.io' \\
--data-urlencode 'grant_type=client_credentials' \\
--data-urlencode 'client_id=<YOUR_CLIENT_ID>' \\
--data-urlencode 'client_secret=<YOUR_CLIENT_SECRET>'

Here's an example response:

{
    "access_token": "eyJhbG...",
    "scope": "...",
    "expires_in": 86400,
    "token_type": "Bearer"
}

In the response:

• access_token contains the JWT. You can use the JWT to:
  • Generate an Edge token using the Deploy REST API or the Token API. This lets you authorize your requests to the Delivery API.
  • Authorize requests to the Token API or Admin API.
• scope defines the resources the JWT provides access to. The resources depend on the type of credentials you created.
• expires_in defines the validity of the JWT in seconds. Note that JWTs typically expire in 24 hours. After that time, the token is no longer valid and you must request a new token.
• token_type defines the type of token created, such as Bearer.