Everything you need to build against the Class API. If you are new here, work down the page — access first, then authentication, then the detail.
- Access Class APIs — how Partners and Clients obtain OAuth credentials.
- Environments — PIE and production hosts, base URLs, and what PIE contains.
How applications and users obtain tokens to call the Class API.
- Authorisation Code Flow — the recommended flow, and the only one available to Partners.
- Authorisation Scopes — available scopes, access specifiers and least-privilege guidance.
- Resource Owner Password Flow — direct credential flow, available to Clients only.
- Single Sign-On using Class API — ID tokens and SSO patterns.
- UserInfo Endpoint — retrieving the authenticated user's profile.
- Authorising Partner Application API Access — how a Class user grants and revokes consent. Written for end users; useful context if you are building a Partner application.
Not sure whether you are a Partner or a Client? See Integration models.
- Class API Structure — URL structure, request headers, the response envelope and HTTP status codes.
- Error Codes — OAuth error codes for the authorisation and token endpoints.
- Rate Limiting — limits, response headers and back-off guidance.
- Managing Access and Refresh Tokens — token lifetimes, rotation and storage.
- API Reference — the full OpenAPI reference.