Before your application can access private data using Penta-b API, it must obtain an access token that grants access to that API. A single access token can grant varying degrees of access to multiple APIs.
There are several ways to make a token request, and they vary based on the type of application you are building. For example, a JavaScript application might request an access token using a browser redirect, while an application installed on a device that has no browser, uses web service requests.
Since Penta-b’s APIs supports OAuth 2.0 and OpenID Connect, any client that supports these standards will easily be able to authenticate and authorize users as needed by the application.