Skip to main content
Sohar uses the OAuth 2.0 bearer token authentication scheme. Retrieve a bearer token via the Get Token endpoint. This call requires your client_id and client_secret, which an organization admin can generate from the Sohar dashboard. Your credentials determine whether requests use the sandbox or production environment. The /oauth/token endpoint expects a JSON body with your credentials:
Include the token in the Authorization header as Bearer <token> when calling other APIs.