Decide whether to use a personal access token or access and refresh tokens for Digital Advisor API authentication
Suggest changes
PDFs
You can choose to use a personal access token or access and refresh tokens to authenticate with Digital Advisor APIs.
The following table shows the differences between each authentication method. You can use this table to choose the correct authentication method for your environment and use case.
| Token type | Validity | Requirements |
|---|---|---|
Personal access token |
Up to 90 days (single token) |
The same token can be used until it expires or is revoked. No refresh token is required. |
Access and refresh tokens |
Access token: 1 hour Refresh token: 7 days |
When it expires, the access token must be refreshed using the refresh token. The refresh token must be used within 7 days. After you refresh, you receive a new token. You must save the new token to use it the next time your access token expires. |
After you've decided which token type you want to use, generate your tokens by choosing one of the following procedures: