Authentication
The WhenFresh API uses the REST/JSON-based OpenID Connect as a simple identity layer on top of the OAuth 2.0 protocol.
We issue long-lasting refresh tokens to developers on the account page, which can be exchanged for limited-time (1 hour) access tokens either programmatically or via the API's token endpoint.
Examples
The SDK Quick Start and HTTP Quick Start guides put this principle into practice.