Authentication
OAuth2 client credentials flow for the Further AI API
The Further AI API uses OAuth2 Client Credentials for authentication. You exchange a client ID and secret for a short-lived access token, then pass that token as a Bearer header on every subsequent request.
Overview
Token Endpoint
Request Body
Response
A successful response returns:
Token Expiry
Access tokens expire after 60 minutes. Your application must request a new token before the current one expires. There is no refresh-token flow; simply call the token endpoint again with your credentials.
Examples
cURL
Python
Python with Automatic Refresh
For long-running applications, implement token caching with automatic refresh:
Using the Bearer Token
Once you have an access token, include it in the Authorization header of every API request:
Python
cURL
Error Responses
Security Best Practices
- Never expose your
client_secretin client-side code or public repositories. - Store credentials in environment variables or a secrets manager.
- Rotate your credentials periodically and immediately if you suspect a compromise.
- Always use HTTPS for all API communication.