Overview

Authenticate Third-Party JWT

This API supports JWTs generated by third-party clients using the asymmetric RS256 algorithm, which relies on a private/public key pair:

The public key must be provided by the client in SPKI format.
Clients are required to generate a new key pair specifically for their TG integration.
Clients use the private key to sign and generate the access token.
TG uses the public key to validate the token and extract claims information

The following claims are validated by the API:

oAuth

Authorizationstring Required

Bearer token

StoreIdstring Required

StoreId API key provided by Tuned Global to authenticate and authorize access to the service

200

Object

Returns a TG token.

access_tokenstring

A JWT access token issued upon successful authentication, used to authorize subsequent API requests.

token_typestring

The type of the issued token, usually indicating the scheme to be used in the Authorization header, such as Bearer.

expires_innumber

The lifetime of the access token in seconds before it expires and requires renewal.

refresh_tokenstring

A token used to obtain a new access token without re-authenticating, typically valid for a longer period.

400

Object

Sections