We are leveraging the REST API and we have question with regards to authentication : REST API sup...

sharath.kumar

...ports OAuth 2.0?

We are leveraging the REST API. However, there’s a question with regards to authentication – Do you know if the REST API supports OAuth 2.0?

Datascope requires the username & password be stored in the 'Body' payload when we request for an Authentication Token.

This creates a situation where the password is visible while a developer is manually executing this interface. This is highly undesirable as you can imagine.

Per your prior advice (on searching for things in the QA Forum), I found this in the forum but it’s 2 years old.

Is it possible to use OAuth2 specification with DSS? - Forum | Refinitiv Developer Community

Has anything changed?

Jirapongse

@sharath.kumar

The DSS client still needs to use the /Authentication/RequestToken endpoint to get a token.

The body of the request contains the DSS username and password.

POST https://selectapi.datascope.refinitiv.com/RestApi/v1/Authentication/RequestToken HTTP/1.1
Prefer: respond-async
Content-Type: application/json; odata=minimalmetadata
{
    "Credentials": {
        "Username":  "<Your Username>",
        "Password":  "<Your Password>"
    }
}