Autenticación

Exchange your key id + secret for a short-lived bearer token. Send it as `Authorization: Bearer …` together with `X-API-Key: {client_id}` on every call.

post/v1/oauth/token

Requiere autenticación

Cuerpo de la solicitud

grant_typestring
Must be `client_credentials`.
client_idstring
Your key id (`dt_live_…` / `dt_sbx_…`).
client_secretstring
Your client secret.
scopestring
Optional space-separated subset of your granted scopes.

Ejemplo

{
  "grant_type": "string",
  "client_id": "string",
  "client_secret": "string",
  "scope": "string"
}

Respuestas

200OKTokenResponse

accessTokenstring
tokenTypestring
expiresIninteger (int32)
scopestring
Space-separated scopes the token carries.
environmentstring
Which environment this token is valid on.

400Bad RequestDetalles del problema según RFC 7807
401UnauthorizedDetalles del problema según RFC 7807

Ejemplos de código

Programas completos que firman la solicitud tal como la verifica la pasarela. Sustituya YOUR_KEY_ID y YOUR_SECRET.

curl -X POST "https://api.dubaitrip.com/v1/oauth/token" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "grant_type=client_credentials" \
  -d "client_id=YOUR_KEY_ID" \
  -d "client_secret=YOUR_SECRET"