Dynamic Signal Authentication

generated: '2026-10-24'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://developers.firstup.io/gettingstarted/supported-authentication-methods.md
sources:
- https://developers.firstup.io/gettingstarted/supported-authentication-methods.md
- https://developers.firstup.io/authorization/authenticationandauthorization.md
- https://developers.firstup.io/authorization/authentication-methods.md
- https://developers.firstup.io/authorization/auth-code-grant-pkce.md
description: Firstup authentication uses OAuth 2.0 flows. All flows return an access token that must be sent in the HTTP Authorization header
  as a Bearer token.
schemes:
- type: oauth2
  name: Client Credentials Grant
  evidence: When you don’t need to act on behalf of a user, you can use the Client Credentials grant to get an access token.
  flows:
  - clientCredentials
  token_url: https://auth.socialchorus.com/oauth/token
  how_to_obtain: Contact Firstup to get your clientID and clientSecret, then POST to the token endpoint with grant_type=client_credentials, client_id
    and client_secret.
- type: oauth2
  name: Authorization Code Grant
  evidence: This method is for applications that require user interaction, such as web or mobile apps where a user logs in and authorizes access.
  flows:
  - authorizationCode
  token_url: https://auth.socialchorus.com/oauth/token
  authorize_url: https://auth.socialchorus.com/oauth/authorize
  how_to_obtain: Redirect the user to the authorize URL, then exchange the returned code at the token endpoint with grant_type=authorization_code,
    client_id, client_secret, redirect_uri and code.
- type: oauth2
  name: Authorization Code Grant with PKCE
  evidence: PKCE (Proof Key for Code Exchange) is an OAuth 2.0 extension that secures public clients, such as mobile apps and single-page applications
    (SPAs) that cannot securely store a client secret.
  flows:
  - authorizationCode
  token_url: https://auth.socialchorus.com/oauth/token
  authorize_url: https://auth.socialchorus.com/oauth/authorize
  how_to_obtain: Generate a code_verifier and code_challenge, build the authorization URL with code_challenge and code_challenge_method=S256,
    then exchange the returned code at the token endpoint with grant_type=authorization_code, client_id, redirect_uri, code and code_verifier.
- type: oauth2
  name: JWT Bearer Token Grant
  evidence: JWT (JSON Web Token) authentication allows your service to act on behalf of a specific user or system identity without user login.
  flows:
  - clientCredentials
  token_url: https://auth.socialchorus.com/oauth/token
  how_to_obtain: Create a signed JWT, POST it to the token endpoint with grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer, and receive an
    access token.
note: 'All flows require the access token to be sent as `Authorization: Bearer <access_token>`.'
docs: https://developers.firstup.io/gettingstarted/supported-authentication-methods.md