Most API calls require an authenticated Memsource user. The APIs do not use any special user profiles. Each API can be called on behalf of any existing user using their username and password.
Before calling any API that requires an authenticated user, call the auth/login API to obtain an authentication token. The token is valid for 24 hours and can be used for all subsequent calls. Do not create a new token for every call.
In subsequent API calls, the obtained token is used in the
Authorization header. The header value field is introduced with
ApiToken followed by a space and the token itself.
Use OAuth 2.0 in applications instead of sending tokens with each call.
To establish the OAuth 2.0 connection, follow these steps:
From the Settings page, scroll down to the section and click on Registered OAuth Apps.
Provide a, (Callback) and an optional .
Thepage opens with the new connection in the list and an associated .
The ID is used in the application that connects to Memsource to establish the connection. It is stored in the Memsource database and is used to pair requests with the proper requester.
Use these URLs with the generated Client ID for authorization:
If your profile is located in the US DataCenter, add us before cloud.memsource.com, for example https://us.cloud.memsource.com/web/oauth/authorize
When authorizing, use the Administrator profile to log in and click Allow.
The application is now linked with Memsource and the authentication API call will not be required.