GraphQL Authorization

In this article:

• API Access Token Authorization
  • How do I create an API Access Token?
  • How do I make requests using my API Access Token? 
  • How do I revoke an API Access Token?
• OAuth Authorization

Thinkific's GraphQL API uses two different authorization methods:

• The API Access Token Authorization method for private applications (intended only for use for single account use)
• The OAuth Authorization method for public applications (intended for use with apps listed on the Thinkific App Store)

API Access Token Authorization

You can create a Thinkific API Access Token through your account's Thinkific Admin Panel. 

How do I create an API Access Token?

1. In your Thinkific account, click on Settings
2. Click on the Code & Analytics tab
3. Under API Access Tokens click "Add API Access Token"
4. Give the token an identifiable name
5. Select an expiry method
6. Click "Save"

After clicking SAVE, you’ll be presented with your token once and only once. Please copy this and store it somewhere safe. 

NOTE: Please ensure that you follow industry best practices for storing and using your API Access Token safely. If you are not confident that you can securely manage your API Access Tokens, we strongly recommend using a shorter expiration time.

How do I make requests using my API Access Token? 

Once you have your access token, you can make requests to the Graph by adding it as an Authorization header in your requests (replace <token> with your copied token value):

How do I revoke an API Access Token?

1. In your Thinkific account, click on Settings
2. Click on the Code & Analytics tab
3. Click "Remove" next to the token you'd like to delete

OAuth Authorization

If you intend to use GraphQL for an app listed on the Thinkific App Store you can authorize GraphQL using OAuth.