How to Authenticate

All API calls to communicate with the Headless API require OAuth2.0 authentication against ReBound’s authentication server. ReBound does not do any user management, so machine-to-machine authentication is sufficient. As such, the Client Credentials Flow should be used. Your client manager or your implementation manager needs to provide you with your Client Credentials Client ID and Client Secret.

Obtain an Access Token
Make a POST request to the token endpoint to retrieve an access token with the provided credentials.

Testing and staging environment:PRE (Pre-production): https://presso.cycleon.net/auth/realms/master/protocol/openid-connect/token
Alive Prodcution enviroment: PRD (Production): https://sso.cycleon.net/auth/realms/master/protocol/openid-connect/token

The response will contain an access token, which is valid for 60 minutes.

With the following link, you can access the API documentation for the Headless API: API Documentation

Use the Access Token in API Requests
Include the token in the Authorization header of your requests as follows:

Authorization: Bearer <access_token>