https://jens.dev/tags/bondora.html Recent content in Bondora on My personal blog Hugo en-us Tue, 08 Mar 2016 13:38:54 +0200 https://jens.dev/2016/03/08/authenticate-with-bondora-api-manually.html Tue, 08 Mar 2016 13:38:54 +0200 https://jens.dev/2016/03/08/authenticate-with-bondora-api-manually.html <p>Bondora uses OAuth for its API authentication, while this is great for external service providers owning their own domain/app, it is also relatively cumbersome for stand alone applications/scripts.</p> <p>So here are the steps I did to acquire a refresh token for using the API with curl.</p> <p>First follow the link of the documentation to the <a href="https://developers.google.com/oauthplayground/#step1&amp;scopes=BidsRead%20BidsEdit%20Investments%20SmBuy%20SmSell&amp;url=https%3A//&amp;content_type=application/json&amp;http_method=GET&amp;useDefaultOauthCred=unchecked&amp;oauthEndpointSelect=Custom&amp;oauthAuthEndpointValue=https%3a%2f%2fwww.bondora.com/oauth/authorize&amp;oauthTokenEndpointValue=https%3a%2f%2fapi.bondora.com/oauth/access_token&amp;includeCredentials=unchecked&amp;accessTokenType=bearer&amp;autoRefreshToken=unchecked&amp;accessType=offline&amp;forceAprovalPrompt=checked&amp;response_type=code">&ldquo;google OAuth playground&rdquo;</a>.</p> <p><img src="https://jens.dev/assets/playground-before-anything.png" alt="playground"></p> <p>Most of the configuration should be preset by the link used. If you need it, you can add additional rights to the request (in my case reports where not part of the url): &ldquo;BidsRead BidsEdit Investments SmBuy SmSell ReportRead ReportCreate&rdquo;</p>