Getting authenticated

When making changes to your store using the our webservices you'll need to authenticate first in order to obtain an access_token that can be used to authenticate your later requests. You can see the full documentation here.

______________________________________________________

Getting an access token: email and password

 You can authenticate sending as parameters your email and password. You also need to set the parameter grant_type to "password" and client_id to "Aptoide". You can send your password in clear text or encoded in SHA1.

Example Request

1 2 3 4 5 6 7 8 9

curl -H 'Content-Type: application/json' \ -X POST 'http://www.aptoide.com/webservices/3/oauth2Authentication' \ -d '{ "grant_type":"password", "client_id":"Aptoide", "mode":"json", "username":"aptoider", "password":"aPt0DAZ0rd" }'

If all goes well you get your access_token in the body of the response.

Example Response

1 2 3 4 5 6 7

{    "access_token":"e05b1917b9ec3a1c178297d099a37b3febf34aa5",    "expires_in":60,    "token_type":"Bearer",    "scope":null,    "refresh_token":"6a8c8ecd311117f14b82ed353f3c1347afda424f" }

If your authentication is invalid you'll get the following response.

1 2 3 4

{    "error":"invalid_grant",    "error_description":"Invalid username and password combination" }

Getting an access token: the refresh token

When your access token expires you can get a new one by sending the refresh token you previously got. You'll need to set the grant_type parameter to "refresh_token" and refresh_token to your refresh_token, and send client_id as previously.

Example Request

1 2 3 4 5 6 7 8

curl -H 'Content-Type: application/json' \ -X POST 'http://www.aptoide.com/webservices/3/oauth2Authentication' \ -d '{ "grant_type":"refresh_token", "client_id":"Aptoide", "mode":"json", "refresh_token":"6a8c8ecd311117f14b82ed353f3c1347afda424f" }'