Wegalvanize · Authentication Profile

Wegalvanize Authentication

Authentication

Wegalvanize secures its APIs with http, oauth2, and openIdConnect across 1 declared security scheme, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode, clientCredentials, implicit, tokenExchange, and refreshToken flow(s).

CompanyGovernanceRiskComplianceAuditGRCAnalyticsAutomationSecurity
Methods: http, oauth2, openIdConnect Schemes: 1 OAuth flows: authorizationCode, clientCredentials, implicit, tokenExchange, refreshToken API key in:

Security Schemes

bearerToken http
scheme: bearer

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-21'
method: searched
source: openapi/wegalvanize-highbond-openapi-original.yml
docs: https://help.highbond.com/helpdocs/highbond/en-us/Default.htm#cshid=lp-access-tokens
oidc_discovery: https://oidc.highbond.com/.well-known/openid-configuration
summary:
  types: [http, oauth2, openIdConnect]
  http_scheme: bearer
  bearer_format: oauth2
  token_model: >
    Personal / system-account API tokens minted in Launchpad and sent as
    `Authorization: Bearer <TOKEN>`. Tokens are tied to a user (permissions
    mirror that user's HighBond permissions; API access requires System Admin
    on at least one instance) and, per the docs, are issued without an
    expiration date. Underlying issuance uses the OAuth 2.0 Authorization Code
    workflow.
  oauth2_flows: [authorizationCode, clientCredentials, implicit, tokenExchange, refreshToken]
schemes:
  - name: bearerToken
    type: http
    scheme: bearer
    bearerFormat: oauth2
    applied: global
    sources: [openapi/wegalvanize-highbond-openapi-original.yml]
    description: >
      Industry-standard OAuth 2.0 bearer token for the HighBond platform, sent
      in the Authorization header. Declared as the single global security
      requirement across all operations.
oidc:
  issuer: https://oidc.highbond.com
  authorization_endpoint: https://oidc.highbond.com/auth
  token_endpoint: https://oidc.highbond.com/token
  userinfo_endpoint: https://oidc.highbond.com/userinfo
  jwks_uri: https://oidc.highbond.com/jwks
  introspection_endpoint: https://oidc.highbond.com/tokeninfo
  revocation_endpoint: https://oidc.highbond.com/token/revocation
  end_session_endpoint: https://oidc.highbond.com/session/end
  pushed_authorization_request_endpoint: https://oidc.highbond.com/request
  grant_types_supported: [implicit, authorization_code, refresh_token, client_credentials, "urn:ietf:params:oauth:grant-type:token-exchange"]
  code_challenge_methods_supported: [S256]
  token_endpoint_auth_methods_supported: [client_secret_basic, client_secret_jwt, client_secret_post, private_key_jwt, none]