Formstack Sign API provides two methods for obtaining an access token, based on the client type and specific use case:

• Authorization Code Flow - Involves multiple steps where the user authenticates with the authorization server, and the client exchanges an authorization code for an access token, keeping credentials secure.
• Username and Password Flow (Resource Owner Password Credentials Grant) - The client directly receives the user's username and password to request an access token, making it simpler but less secure since credentials are exposed to the client.

Obtaining an Access Token with Authorization Code

Endpoints used by integrators to exchange an Authorization Code issued by the Authorization Code request for an Access Token which will be used by all subsequent InsureSign API calls.

URL

POST https://sign-auth.insuresign.io/oauth2/token

Headers

Request Fields

Response Fields

Example Request

$ curl 'https://sign-auth.insuresign.io/oauth2/token' -i -X POST \
    -H 'Authorization: Basic YourEncodedClientIdAndSecret' \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -d 'grant_type=authorization_code&client_id=myclientid&redirect_uri=https%3A//048085cd.ngrok.io/auth&code=df90c9f7-680d-4843-996c-70b76f36e56b'

Example Response

HTTP/1.1 200 OK
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Expires: 0
X-Frame-Options: DENY
Content-Length: 625
X-Content-Type-Options: nosniff
Content-Type: application/json;charset=UTF-8
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Cache-Control: no-cache, no-store, max-age=0, must-revalidate

{
  "access_token": "your access token",
  "refresh_token": "your refresh token",
  "expires_in": 3600,
  "token_type": "Bearer"
}

Obtaining an Access Token with Username and Password

Used for integrations configured with the Client Credentials OAuth2 Flow to authenticate. This will return a client access token which will be used to submit with all subsequent requests, providing your authorization to carry out the request.

URL

POST https://sign-auth.insuresign.io/oauth2/token

Headers

Request Fields

Response Fields

📘

Legacy API Endpoint

For any API Credentials issued prior to January 15th, 2021, use the following url:
https://auth.insuresign.io/