Login and Authorization
Obtain credentials to call other APIs through the Login and Authorization API.
Get or Refresh Token
POST /m-api/oauth2/token2 HTTP/1.1
Host: app.fileshow.com
Request Parameters
Common Parameters:
Parameter | Required | Description |
---|---|---|
client_id | Yes | Client ID assigned |
grant_type | Yes | password for account password login;refresh_token to refresh access_token using refresh_token;exchange_token to exchange third-party authorization code or token for Fileshow access_token ;gkkey for GKKey authentication |
dateline | Yes | Current Unix timestamp in seconds |
sign | Yes | Signature |
Parameters for grant_type=password
:
Parameter | Required | Description |
---|---|---|
username | Yes | User login account |
password | Yes | User password, MD5 hash of the original password, 32-byte lowercase letters |
Parameters for grant_type=refresh_token
:
Parameter | Required | Description |
---|---|---|
refresh_token | Yes | Refresh token from previous authorization |
Parameters for grant_type=exchange_token
:
Parameter | Required | Description |
---|---|---|
exchange_token | Yes | Third-party authorization code or token |
domain | Yes | Pre-assigned value |
auth | No | Pre-assigned value |
Parameters for grant_type=gkkey
:
Parameter | Required | Description |
---|---|---|
gkkey | Yes | GKKey to be verified |
Response Format
JSON
Response
HTTP 200
{
"access_token": "26SczD3Poj1obd0o7jzZotH1meg",
"expires_in": 21600,
"refresh_token": "TJ8gTQtz2riUfl1wwfVuu3ARr5o"
}
Field | Type | Description |
---|---|---|
access_token | string | Token to call other APIs |
expires_in | number | Expiration time of access_token , in seconds |
refresh_token | string | refresh_token used to refresh access_token , valid for 7 days |
Errors
HTTP STATUS >= 400
{
"error": "Error Code",
"error_description": "Error Description"
}
error | Description |
---|---|
invalid_request | Invalid request parameters |
unsupported_grant_type | Invalid grant_type |
invalid_client | Invalid client_id |
unauthorized_client | client_id does not have permission for the requested grant_type |
deprecated_client | client_id has expired or is disabled |
invalid_token | Invalid refresh_token or gkkey |
invalid_grant | Authentication failed |
access_denied | IP address of the requester is blocked |
second_verify | Requires two-factor authentication |