API Client Permissions: Authentication APIs

The following tables list the API client types (based on client features) that can be used to call the Authentication API endpoints.

Access Tokens and Codes
                                       

Endpoint

owner

access_
issuer

direct_
access

direct_read
_access

login_client

Get an Authorization Code 
POST
/access/getAuthorizationCode

Yes

Yes

Yes

No

No

Get an Access Token 
POST
/access/getAccessToken

Yes

Yes

Yes

No

No

Exchange an Authorization Code
POST
/oauth/token

Yes

Yes

Yes

No

No

Complete Social Login 
POST
/oauth/auth_native






Complete Traditional Login 
POST
/oauth/auth_native_traditional






Complete Social Registration 
POST
/oauth/register_native






Complete Traditional Registration 
POST/
oauth/register_native_traditional







User Profiles
              

Endpoint

owner

access_
issuer

direct_
access

direct_read
_access

login_client

Get a Verification Code 
POST
/access/getVerificationCode

Yes

No

Yes

No

No

Use a Verification Code 
POST
/access/useVerificationCode






Request a Reset Password Link 
POST
/oauth/forgot_password_native






Send a Verify Email Address Link 
POST
/oauth/verify_email_native






Link a Social Identity 
POST
/oauth/link_account_native






Unlink a Social Identity 
POST
/oauth/unlink_account_native






Update a User Profile 
POST
/oauth/update_profile_native