Every SISS API call requires a valid JWT access token obtained using OAuth 2.0 Client Credentials flow. Tokens expire after 10 minutes.
|
Token expiry Tokens expire after 10 minutes (600 seconds). Call the auth endpoint before every API request, or implement token caching with automatic refresh when expires_in approaches zero. Do NOT request a new token when you receive a 429 rate limit error — the error is about call volume, not authentication. |