Axsync API v2

OAuth 2.0

Third-party apps use the authorisation code flow with PKCE.

Flow

  1. Redirect the user to https://app.axnode.net/oauth/authorize with client_id, redirect_uri, scope, state and a PKCE code_challenge.
  2. Receive code on your redirect URI.
  3. Exchange it at POST /oauth/token with the code_verifier.
  4. Use the access token; refresh it before it expires.
curl -X POST "https://api.axnode.net/v2/oauth/token" \
  -d grant_type=authorization_code \
  -d code=$CODE -d client_id=$CLIENT_ID \
  -d redirect_uri=$REDIRECT -d code_verifier=$VERIFIER