Get an access token
Exchange your CrazyGoldFish API username and password for a bearer token, and send it in the Authorization header of every request.
POST
Get an access token
An access token is a temporary key that proves a request comes from your account. Every API request needs one. Get it by sending your API username and password as form data to
POST /token. To get credentials, contact CrazyGoldFish.
Send the token
Add the token to theAuthorization header of every other request:
When a token expires
Tokens expire. The expiry time is the token’sexp claim, a Unix timestamp. Reuse a token until it expires instead of requesting one for every call.
When a token is expired or invalid, the response depends on the API family:
Request a new token and retry.
Use one API user per integration
A token identifies an API user, and some data is scoped to that user:- Webhooks only fire for jobs started by the user who registered them.
- List worksheets only returns worksheets that user created.
- Exam, assignment, and rubric lists only return items that user created.