Personal Access Token
Developers will be provided with API credentials, which will include an OAuth key (API feed ID) and a non-expiring access token, enabling direct access to the RESO Web API and Spark® API. All requests using the token must be made using HTTPS.
Important!
Never provide your access_token, refresh_token or client_secret to a web browser or other end-user agent. Instead, maintain a separate session and persist this data in a location accessible only by your application (e.g. do not store the access_token in a cookie).
Contact api-support@sparkplatform.com for further guidance.
To request data from the api you will need to provide two headers. The Authorization header and the Accept header.
You will typically want an Accept header of application/json but, if you are accessing the metadata document of
the RESO metadata document you will need to use application/xml.
For the Authorization header you will use Bearer <your_access_token>.
Authorization: Bearer <your_access_token>
Accept: application/json