Podium exchanges client credentials for a bearer token, which you then send on every call. An Insights API key does not work here.This scheme predates the api-key header Insights uses. We are migrating everything to API keys.
Post your client credentials as multipart/form-data to the identity service. Your representative issues the client_id and client_secret by secure email.
Field
Value
client_id
Issued to you
client_secret
Issued to you
grant_type
client_credentials
scope
extract-by-imo:metrics
The response carries access_token, token_type, scope and expires_in.
expires_in comes back as 3600, so a token is good for one hour. There is no refresh token: when one expires, request another from the same endpoint with the same credentials.
Request a token on expiry, not on every call
The identity service issues a fresh token each time you ask. Cache the one you hold until expires_in runs out, and a 401 then points at the credentials instead of the clock.
