Client Credentials

Client Credentials is a secure authentication method recommended for server to server communication. It is useful for background services or automated tasks that operate independently of user sessions.

The application authenticates with its own credentials (a client ID and client secret). Before calling an AireGlu endpoint, obtain an access token from AireIdentity.

Example request:

POST https://identity.aireinnovate.com/connect/token
CONTENT-TYPE application/x-www-form-urlencoded
client_id=[MY_CLIENT]&
client_secret=[MY_CLIENT_SECRET]&
grant_type=client_credentials&
tenant_key=[MY_TENANT_ENVIRONMENT_KEY]&
scope=AireGluRuntimeApi

The client must specify the AireGluRuntimeApi scope.

Include the returned token in the Authorization header as a Bearer token on subsequent requests to the endpoint. Only the Bearer header is supported; form POST is not used for client credentials.

Authorization: Bearer {ACCESS_TOKEN}

Cross tenant endpoint invocations are not permitted. The tenant key claim in the token must match the tenant key of the endpoint being invoked.

This is not the same as Open ID Connect Bearer Token, which validates user access tokens from a host application rather than application credentials.