Graph API Authorization
Graph API requests are performed with the integration access token. Integration access tokens are unique for each district or university integration. Adding an integration access token to your request headers will return data specific to that integration. There is not currently a way to retrieve data for multiple different district integrations in a single request.
Locating Integration Access Tokens
You can find integration access tokens on the Edlink Dashboard by clicking on any active integration and copying it directly. You can programmatically access your integration access tokens by using the API call documented here. Accessing integrations programmatically can be very useful, particularly at scale. It can be awkward and cumbersome to manually create and update integrations for each district or university you work with, especially if you work with many different districts or universities.
- Integration access tokens are unique for each district or university integration.
- Integration access tokens do not expire.
- Integration access tokens are not tied to a specific user.
- Integration access tokens are not intended to be used by end users. They are intended to be used by your backend systems. Do not expose them on the frontend.
- Integration access tokens will only work while your integration state is
active
orpaused
. - If you intend to use the Graph API for making write requests to the API (
POST
,PUT
,PATCH
, orDELETE
), you need to be careful about making the necessary permissions checks. - If you believe your integration access token has been compromised, you should contact us immediately.
Making Requests With Integration Access Tokens
Using the integration access token is simple. Add the token to the authorization
header of your request. Integration access tokens do not expire, so you do not need to worry about refreshing them.
axios.get('https://ed.link/api/v2/graph/people', {
headers: {
authorization: `Bearer ${integration_access_token}`
}
});