Authentication and authorization

All APIs require access token authentication. The requests must set the following headers:

  1. Authorization header with bearer token, which is the technical account token, received via JWT exchange from Adobe Developer Console project. The scopes are documented below.

  2. x-gw-ims-org-id header with the IMS organization ID.

  3. x-api-key with the client ID from the Adobe Developers Console project.

Scopes

Ensure the following scopes for the access token:

  • openid
  • AdobeID
  • asset_compute
  • read_organizations
  • event_receiver
  • event_receiver_api
  • adobeio_api
  • additional_info.roles
  • additional_info.projectedProductContext

These scopes require the Adobe Developer Console project to be subscribed to Asset Compute, I/O Events, and I/O Management API services. The breakdown of individual scopes is:

  • Basic

    • scopes: openid,AdobeID
  • Asset Compute

    • metascope: asset_compute_meta
    • scopes: asset_compute,read_organizations
  • Adobe I/O Events

    • metascope: event_receiver_api
    • scopes: event_receiver,event_receiver_api
  • Adobe I/O Management API

    • metascope: ent_adobeio_sdk
    • scopes: adobeio_api,additional_info.roles,additional_info.projectedProductContext