Authorizer API (1.0.0)
The EchoSync Authorizer API is the authentication service for the EchoSync platform. It validates your application credentials and issues OAuth 2.0 Bearer tokens that grant access to EchoSync APIs.
Not every EchoSync API uses the Authorizer, and not every one requires a Bearer token. The Carrier API requires a Bearer token from this service. The Pricing API accepts either a Bearer token or Basic Authentication. The Shipper API uses Basic Authentication only and does not use this service.
Where a Bearer token is required, send it in the Authorization header:
Authorization: Bearer {your_token}Important Reuse your token until it expires. Do not request a new token on every API call. Cache the token and use it for its full validity period. Requesting new tokens repeatedly within the same validity window may trigger rate limiting.
- Access tokens are valid for 86400 seconds (24 hours) from the time they are issued.
- The endpoint
/tokenresponse includes:expires_in— token lifetime in seconds (used to determine when the token should be refreshed)scope— the permissions granted to the token, defining which APIs it can access
- A
401 Unauthorizedresponse from any EchoSync API indicates the token is expired or invalid. In this case, request a new token and retry the request.