General / Authentication

Authentication

Before issuing any requests against the Boarding API, you must obtain an token. Once an token is obtained, the token is valid for 6 minutes, after which, a new token should be generated.

Understanding the authentication flow

The Boarding API utilize access tokens, generated from a username and password combination in combination with a client id and secret, for authentication. This is based on the resource owner password flow of the OAuth2 specification. Fore more information: https://auth0.com/docs/flows/resource-owner-password-flow. Note: CCV has no association with this site and is not responsible for the content.

CCV will supply you the username, client id and secret. You can set the password yourself based on an activation e-mail you receive from MyCCV.

IMPORTANT: Your username, password, client id and secret should be considered as sensitive as a password, and must be used only by authorized parties

Retrieving your token

Exchange your credentials for a token. Use the following scope: openid profile context OrderCompletion.standard portal ccveu.external. An application makes a request to the POST /oauth/token endpoint to exchange these credentials for a bearer token. You can use this bearer token in the header to call the API.