Skip to content

Authentication best practices

Authentication token expiry

The Investment API uses opaque access tokens obtained using the OAuth 2.0 Client Credentials flow.

These authentication tokens have an expiry time meaning you must request a new authentication token when the existing one expires.

You will receive error status 401 (Unauthorized) when the token expires.