Authentication API

1.0OAS 3.1
API Base URL
  • Server 1:https://www.us-stg-api.morningstar.com

    Americas Production

  • Server 2:https://www.apac-stg-api.morningstar.com

    APAC Production

  • Server 3:https://www.emea-stg-api.morningstar.com

    EMEA Production

Security
basicAuth (http)

HTTP Basic authentication using your API credentials.

  • Username — your client_id
  • Password — your client_secret

Enter these values in the Username and Password fields to authorise requests from this page.

The credentials are Base64-encoded into the Authorization header on your behalf.

Generate a JSON Web Token (JWT)

Authenticates a client using HTTP Basic authentication and returns a signed JWT bearer token for use in subsequent API requests.
Pass your client ID and secret as a Base64-encoded client_id:client_secret string in the Authorization header. Include the returned access_token as a Bearer token on subsequent requests.

post

Body

application/x-www-form-urlencoded
grant_typestringrequired

Allowed values:client_credentials

Response

application/json

200: OK

OutputToken

A successful authentication response containing a JWT bearer token.

access_tokenstringrequired

The signed JWT to use as a Bearer token in subsequent authenticated requests.

Example:eyJhbGciOiJ example

expires_inintegerrequired

The number of seconds until the token expires. After expiry, request a new token.

Example:3599

token_typestringrequired

The token type. Always Bearer.

Example:Bearer

post/token/oauth

Body

{ "grant_type": "client_credentials" }
 
application/json

OutputToken

object

A successful authentication response containing a JWT bearer token.

access_tokenstringrequired

The signed JWT to use as a Bearer token in subsequent authenticated requests.

Example:eyJhbGciOiJ example

expires_inintegerrequired

The number of seconds until the token expires. After expiry, request a new token.

Example:3599

token_typestringrequired

The token type. Always Bearer.

Example:Bearer

Example

ErrorResponse

object

A response body returned when an error occurs.

error_messagestringrequired

A human-readable description of the error.

Example:Incorrect username or password

Example