More information on implicit grant flow

[PierrickPuimeanChieze]

I am trying to developp a personnal productivity tool using Shoeboxed API, but it seems that only the authorization code is documented. More information about the implicit grant flow would be nice.

Also, more information on the expected header of the request would be nice, instead of curl command.

[igstan]

Implicit flow is pretty simple, but we'll add short docs about it, too. You need to issue an initial request to

https://id.shoeboxed.com/oauth/authorize?response_type=token&client_id=...&redirect_uri=...&scope=all

Fill in the ellipses with the appropriate client_id and redirect_uri values. After the user authorizes your request, the browser will be redirected back to the redirect_uri you've given and a fragment that looks similar to the following:

$REDIRECT_URI/#access_token=9a3d2571-1f47-44b3-8931-0d8ade4ea028&token_type=bearer&expires_in=1800&scope=all

You can then grab the access token from the fragment part of the URL and use it in request by setting this header:

Authorization: Bearer 9a3d2571-1f47-44b3-8931-0d8ade4ea028

[PierrickPuimeanChieze]

Thanks a lot