EPISHIP’s security layer manages the trust relationship between users and third-party applications. It handles the UI for user consent forms (Allow/Deny access), manages client secrets, and provides a dashboard for users to revoke personal access tokens.
The REST API that executes the OAuth handshake. It verifies client credentials, issues short-lived `access_tokens` and long-lived `refresh_tokens`, and validates incoming requests against defined scopes.
The API supports multiple methods for obtaining tokens, including `authorization_code` for web apps, `password` for direct trusted login, and `refresh_token` for maintaining long-running sessions without re-entering credentials.
 Users can use the EPISHIP OAuth API to perform common workflows, such as:
OAuth properties available to view and filter through the EPISHIP Authentication API:
