API Reference
StatusService Desk

Oauth

API providing endpoints for requesting and revoking OAuth tokens.

Authorization Code Flow

To request a token the user must go through the Authorization code flow.
It basically consists of an exchange of an authorization token for an access token. For more detailed info, check out the RFC spec here.

URL for Authorization Code Flow:

https://navi.ntuity.io/oauth/authorize?client_id={{clientId}}&redirect_uri={{redirectUri}}&response_type=code&scope=public&code_challenge_method=S256&code_challenge={{codeChallenge}}

Also ensure to use PKCE (see here for more details) by providing two additional parameters in Auth Code Flow

  • code_challenge_method: S256
  • code_challenge: generated based on a code_verifier which must be provided when requesting the access token. It is the SHA256 base64 url encoded value of the code_verifier.