What you need to do is construct a POST request to https://api.ltl.xpo.com/token
You will need to set the header of the request to include an Authorization: basic header with your security token
Authorization: Basic <token>
Where token is made up of the base64 encoded result of your consumer key and consumer secret concatenated to each other.
You then send as the body of the request the url encoded grant_type, username and password values
This would typically be done from a server side process (PHP CUrl for example).
If all checks out you should get back a JSON response which contains a property access_token the value of which must be used in all other API calls - it is a temporary access token - if it expires you need to repeat the above process to refresh it.
David Favor
As Julian mentioned, likely what's tripping you up is you're thinking about this in terms of client side HTML, rather than a server site POST request.
What you'll do is...
1) Craft a POST request to your API Endpoint.
2) Get back a token.
3) Craft additional POST requests using the token, to acquire additional information.
Richard Korts
ASKER
I tried a cut at it, as I expected, it failed, I got this:
Fatal error: Call to a member function xpath() on boolean in /home/lakoshva/public_html/get_XPO_access.php on line 23
I will email you the code as it has password, etc. in it. The function xpath DID work in a prior version, NOT being defined in the php program referencing it. How, I have no clue, I understand the error.
What you need to do is construct a POST request to https://api.ltl.xpo.com/token
You will need to set the header of the request to include an Authorization: basic header with your security token
Authorization: Basic <token>
Where token is made up of the base64 encoded result of your consumer key and consumer secret concatenated to each other.
You then send as the body of the request the url encoded grant_type, username and password values
Open in new window
This would typically be done from a server side process (PHP CUrl for example).
If all checks out you should get back a JSON response which contains a property access_token the value of which must be used in all other API calls - it is a temporary access token - if it expires you need to repeat the above process to refresh it.