Authentication

BHB uses OAuth 2.0 with the Client Credentials grant type for server-to-server authentication.

1. Requesting Client Credentials

To request your unique client_id and client_secret, please send an email tosupport@correlationconcepts.com with the subject line "BHB API Access Request".

2. Obtaining a JWT Token

Once you have your credentials, you can obtain a JWT (JSON Web Token) by making a POST request to our Auth0 tenant.

curl --request POST \
  --url 'https://correlationconcepts.us.auth0.com/oauth/token' \
  --header 'content-type: application/x-www-form-urlencoded' \
  --data grant_type=client_credentials \
  --data client_id=YOUR_CLIENT_ID \
  --data client_secret=YOUR_CLIENT_SECRET \
  --data audience=server.proggor.com

3. Token Response

A successful response will return an access_token, which is your JWT.

{
  "access_token": "redacted.jwt.token",
  "scope": "license:notes:free",
  "expires_in": 86400,
  "token_type": "Bearer"
}