Authentication Basics

Wiki ▸ API Reference ▸ Authentication ▸ Authentication Basics

API Clients

Client	client_id	client_secret
Android	shoutit-android	319d412a371643ccaa9166163c34387f
iOS	shoutit-ios	209b7e713eca4774b5b2d8c20b779d91
WebApp	shoutit-web	0db3faf807534d1eb944a1a004f9cee3
Test	shoutit-test	d89339adda874f02810efddd7427ebd6

Authentication Methods

Method	grant_type	required attributes	extras
Shoutit Signup	shoutit_signup	name, email, password
Shoutit Login	shoutit_login	email, password
Shoutit Page	shoutit_page	page_name, page_category, name, email, password	returned access_token and refresh_token belog to the page creator (user). returned profile is the Page profile. Check Pages Authentication
Shoutit Guest	shoutit_guest		push_tokens can be set under the profile object to assign this guest with a device to send push notifications
Facebook	facebook_access_token	facebook_access_token	Required Facebook permissions: email
Google+	gplus_code	gplus_code	Required Google+ scopes: https://www.googleapis.com/auth/plus.login and https://www.googleapis.com/auth/userinfo.email
SMS	sms_code	sms_code	used in some marketing campaigns where users will be signed up once clicking the smsed URL
Refresh Token	refresh_token	refresh_token

Authentication Flow

1. Collect authentication data based on the desired authentication method
2. Get an access token
3. Refresh the access token when expired

Endpoints

These are links to live docs where each endpoint is explained individually

• OAuth2 endpoint
• Other authentication endpoints
  • Password change
  • Password set (for first time) and reset (forgot password)
  • Email verification