Fastio Authentication

generated: '2026-11-08'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://docs.fast.io/oauth.html
sources:
- https://docs.fast.io/oauth.html
- https://docs.fast.io/auth.html
- https://docs.fast.io/signing.html
description: Fastio supports multiple authentication methods as documented.
schemes:
- type: oauth2
  name: OAuth 2.0 PKCE
  evidence: Fastio implements OAuth 2.0 with PKCE (Proof Key for Code Exchange) for secure authorization without passing user credentials through
    the client application.
  flows:
  - authorization_code
  - refresh_token
  authorize_url: https://go.fast.io/api/current/oauth/authorize
  scopes:
  - user
  - org
  - workspace
  - all_orgs
  - all_workspaces
  - all_shares
  - all_sign_envelopes
  how_to_obtain: Dynamic client registration via POST /current/oauth/register/ and then follow the PKCE authorization flow (GET /current/oauth/authorize/,
    POST /current/oauth/token/).
- type: http-bearer
  name: API Key
  evidence: 'Long-lived tokens for service-to-service communication. Created via the API or the web UI. Used with the same Authorization: Bearer
    {api_key} header format as JWTs.'
  location: header
  header: Authorization
  how_to_obtain: Create an API key via the API or Fastio web UI.
- type: http-basic
  name: Basic Auth to JWT (deprecated)
  evidence: Send HTTP Basic Auth ( email:password ) to get a JWT.
  location: header
  header: Authorization
  how_to_obtain: GET /current/user/auth/ with Basic Authorization header containing base64(email:password).
docs: https://docs.fast.io/oauth.html