Skip to main content

Get AccessToken

What is AccessToken​

AccessToken is a security token used to represent the user's authentication information in stateless protocols. In cloud development platforms, AccessToken allows applications to access protected resources, such as user data and specific services.

The Importance of Getting AccessToken​

  • Security: AccessToken provides a secure way to control access to APIs.
  • Flexibility: Allows users to share and transfer authentication information across different applications and services.

Steps to Get AccessToken​

User Authentication​

First, users need to authenticate using the authentication methods supported by the cloud development platform.

For example, User Authentication/Sign In By Email/Phone/Username to log in with account and password

Send authentication request​

Using user authentication information, such as username and password, send a request to the authentication service to obtain AccessToken.

Handle Response​

The authentication service will respond to the request and return an AccessToken upon success.

Use AccessToken​

Include AccessToken in the request header​

When making an API call, include the AccessToken in the request header.

Example​

Authorization: Bearer <AccessToken>

Replace <AccessToken> with the actual AccessToken. Note: Bearer cannot be omitted.

AccessToken Validity Period and Refresh​

Validity Period​

AccessToken usually has a limited validity period. After the validity period expires, the AccessToken will no longer be valid.

Refresh AccessToken​

Before the AccessToken expires, a RefreshToken (if available) can be used to obtain a new AccessToken without requiring the user to re-authenticate.

Security Considerations​

Storage​

Ensure that the AccessToken is securely stored to prevent exposure to end users on the client side.

Transfer​

Use HTTPS and other secure protocols to transmit AccessToken to prevent man-in-the-middle attacks.

Monitoring​

Monitor AccessToken usage to take timely action when anomalies are detected.

Error Handling​

Invalid AccessToken​

If an invalid AccessToken is used, the API will return a 401 Unauthorized error.

Expired AccessToken​

If the AccessToken expires, the API may return a 401 Unauthorized error and prompt that a refresh is required.

Properly obtaining and managing AccessToken is key to ensuring application security and user data protection. Follow best practices to ensure the security and validity of AccessToken.