Skip to main content

​
Overview

We use the OAuth 2.0 Client Credentials Flow for secure machine-to-machine (M2M) communication. This allows backend systems to authenticate directly with our API without user interaction. To access protected endpoints (like APIs), you must:
  1. Obtain a Client ID and Client Secret.
  2. Exchange these credentials for an Access Token.
  3. Include the token in the Authorization header of your API requests.

​
Step 1: Obtain Credentials

Before you can authenticate, you need an API Client. This is typically created by the Admin.
If you are a third-party integrator, request these credentials from the administrator.
When a client is created, you will receive:
  • Client ID: A public identifier for your application.
  • Client Secret: A private key known only to your application and the API.

​
Step 2: Generate Access Token

Once you have your credentials, use the /oauth/token endpoint to request an access token. (API Reference)

​
Request

POST /oauth/token Headers:
  • Content-Type: application/json
Body:
ParameterTypeRequiredDescription
grant_typestringYesMust be set to client_credentials.
client_idstringYesYour unique Client ID.
client_secretstringYesYour unique Client Secret.
curl -X POST "[https://api.wizlo.example.com/oauth/token](https://api.wizlo.example.com/oauth/token)" \
  -H "Content-Type: application/json" \
  -d '{
    "grant_type": "client_credentials",
    "client_id": "client-uuid-abc123",
    "client_secret": "your-secret-key-here"
  }'