Sandbox

API authentication is done with Access Tokens. Torch APIs are secured with Oauth 2.0 Authentication Policies. Client Credentials Grant Type is used to secure an access token by making a request to our Authentication URLs.

OAuth 2.0 Authentication URLS

Refer to the following support documentation to locate and utilize your Torch API Client Credentials, retrieve Access Tokens, and use our 'Try It" feature: 

• How to get Access Token with Client Credentials
• How to test an API in Sandbox using the“Try It” Authorize Feature
• Managing Client Credentials

Client Credentials are enabled for development and can be referenced as you build in your preferred programming language. You can reference the technical documentation located on our API Products Page. 

NOTE: To move forward with production access, we will require you send API traffic using mock dynamic data. The API Documentation will guide you on how to structure your payloads. 

For the demo, we require your application to handle all HTTPS Responses passed from our APIs. Our APIs will throw Error Messages in the JSON format below, as described in RFC-9457 Problem Details for HTTPS APIs . Your system must respond and recover from errors that may occur during execution. 

The error.message must be displayed on the front/backend of your application.

Error Format

{
                       "errors": 
                      [{
                                    "code": "ERROR_UNIQUE_CODE",
                                    "message": "ERROR_MESSAGE",
                                    "category" : "SHORT_DESCRIPTION/ERROR_CATEGORY",
                                    "reference" : "API_DOCUMENTATION_LINK",
                                    "status" : "HTTP_STATUS_CODE",
                                    "traceId" : "UUID"
                      }]}