BibTread Next Dealer APIs

OAuth2 Authentication and Usage Guide
 

• Every BTN API call requires an OAuth2 bearer token in the Authorization header. 
• There is no anonymous or API-key-only access; user must obtain a token before calling any API. 

• Credentials to obtain an token will be provided by BTN team upon subscription to the APIs.

   

1. Token Generation

Request a token from the Michelin API endpoint using the OAuth2 client-credentials grant:

curl --request POST 
  --url
  'https://<ENV_URL_TO_CALL>.api.michelin.com/idp/v1/internal/oauth/token/accesstoken?grant_type=client_credentials'
  --header 'content-type: application/x-www-form-urlencoded' \
  
  --data client_id={client_id} \
  --data client_secret={client_secret}

ENV_URL_TO_CALL depends on the target environment:

2. Calling the API

Every request to the APIs must include the issued access token in the Authorization header as follows:

Authorization: Bearer {my_token}

A request made without a valid Authorization: Bearer header will be rejected before dealer/client validation is performed.

3. Token Expiry

The access token is valid for 2 hours from issuance. Once expired, any requests using that token will be rejected.

A new token must be generated using the client-credentials flow described above before making further API calls.