OAuth 2.0
OAuth 2.0
Integrate DocID® with the authorization code flow and PKCE.
DocID® custom website integrations use the OAuth 2.0 authorization code flow with PKCE. OpenID Connect scopes provide the authenticated user's approved identity claims.
Endpoints
| Purpose | URL |
|---|---|
| Authorization | https://docid.pro/oauth2/authorize |
| Token exchange and refresh | https://docid.pro/oauth2/token |
| User information | https://docid.pro/oauth2/userinfo |
| Token introspection | https://docid.pro/oauth2/introspect |
| Token revocation | https://docid.pro/oauth2/revoke |
These are the production endpoints. For another environment, use the issuer and client configuration supplied for the asset instead of guessing the host.
Implementation sequence
- Configure the client.
- Implement the authorization code flow.
- Request only the needed scopes and claims.
- Apply the security and environment guidance.
The OAuth endpoints implement the login protocol. The business API is a separate interface for supported application resources.