3 - Authentication

To connect to Wave, you need to provide authentication credentials. You can acquire them by generating Full access or OAuth 2 tokens.

Use Full Access if you're creating an app just for yourself, or if you don't have a Pro account.
Use OAuth 2 if you have a Pro account, or you want to create an app for multiple users.

Heads up! Your Access Token provides full access to all businesses in your Wave account, not just your test account. Don't share it with anyone.

Full access token

A full access token has the same permission level as your user account. This token can be passed to the API using an Authorization header with a value of Bearer YOUR_TOKEN. You can see examples on the next page.

While a full access token is the quickest and most convenient way to start exploring the Wave API with businesses in your own Wave account, it is strictly recommended for development purposes or personal applications only.

For any applications that will be published or sold for other Wave users to access their accounts, authentication must be via OAuth 2.

How to create a full access token

  1. Go to Manage Applications.

    Select the application you created in the previous step. Haven't created an application yet? Go back to the Create an application step.

    Applications list with one row named Test app

  2. Click Create token to generate a new full access token.

    Full Access tokens panel with a red warning banner and a Create token button

  3. Use the token in the Authorization header and your requests will be authenticated. No longer need a token? Click Revoke to cut off access.

    curl -L 'https://gql.waveapps.com/graphql/public' \
-H 'Authorization: Bearer <ACCESS_TOKEN>' \
-H 'Content-Type: application/json' \
-d '{"query":"query { user { id defaultEmail } }","variables":{}}'

OAuth 2

An OAuth token enables a Wave user to securely grant your application scoped access to their account. This is the standard and most secure method for authenticating users in applications you plan to publish or sell. See OAuth Guide and OAuth Scopes for instructions.

Please note: Users can only grant access to businesses that have an active Pro or Wave Advisor subscription with Wave.

Next: Making API calls

Updated on