Page History

Authorization functionality within SSO is moved to dedicated service (OIDC).

All the following tasks should be performed through direct communication with OIDC and received token should be just used in all APIs of BIM+.

Old Bim+ tokens are simulated only for backward compatibility until 2026, high performance should not be awaited using them.

Authorization Service

...

• Authorizes a user and returns a token for further API calls
• Get token information
• Request a cross token
• Cross authenticate by using cross token
• Revoke / Terminate the token
• Authorize a user and get "remember me" token
• Login with "remember me" token

...

Obsolete.Tokens should be received from OIDC.

Authorizes a user and returns a BIMPlus-token for further API calls

Content-Type: application/json

{
 "user_id" : "test@bimplus.net",
 "password" : "test" ,
 "application_id" : "6C12345D9B0C4F3C23ABB5721D098F7B"
}

Status: 200 OK

{
"access_token": "9c1874a62c974dcfa75e0132c423a088",
"expires_in": 2591999,
"client_id": "9fd0bb9d-570b-4719-bfae-93e2f879c19a",
"token_type": "BimPlus"
}

Obsolete.Tokens should be managed by OIDC.

Get token information

Content-Type: application/json

Authorization: BimPlus 9c1874a62c974dcfa75e0132c423a088

Status: 200 OK

{
    "user_id": "b37b60d4-0f1b-4158-99c4-847254786517",
    "audience": "00000000-0000-0000-0000-000000000000",
    "expires_in": 2271650

} 

Obsolete. This type of tokens will not be supported.

Request a cross token

Authorization: BimPlus 9c1874a62c974dcfa75e0132c423a088
Content-Type: application/json

Status: 200 OK

{
cross_token: "b392cee4d0044ef681fa911772668cf9"
expires_in: 299
token_type: "BimPlus"
}

Obsolete. Cross Authenticate by using cross token. Will be removed.

Content-Type: application/json

{
"cross_token": "b392cee4d0044ef681fa911772668cf9"
}

Status: 200 OK

{
"access_token": "43796fab76d54d2c9cb9120fd7d79c9e",
"expires_in": 2591999,
"client_id": "9fd0bb9d-570b-4719-bfae-93e2f879c19a",
"token_type": "BimPlus"
}

...

Content-Type: application/json

Authorization: BimPlus 9c1874a62c974dcfa75e0132c423a088

Status: 200 OK

Obsolete.Tokens should be refreshed with OIDC.

Authorize a user and get "remember me" token.

User is still logged on to other services. For real logout, call logout function of OIDC.

Content-Type: application/json

{
    "user_id" : "test@bimplus.net",
    "password" : "test",
    "remember_me" : "true",
    "application_id": "0106c8baad467c08e26f026852cb7525",
    "client_id": "0864b512-1776-4a55-8ee5-2b19d7d9b7ea"
}

Status: 200 OK

{
    "access_token": "35eb2b5e94b54d5aafa6b6a7b6e8de01",
    "expires_in": 28799,
    "application_id": "0106c8baad467c08e26f026852cb7525",
    "client_id": "0864b512-1776-4a55-8ee5-2b19d7d9b7ea",
    "remember_me": true,
    "remember_me_token": "b930e0179baf4f919caeab28328190a3", 
    "remember_me_expires_in" : 2591999 
}

Obsolete.Tokens should be received from OIDC.

Get "remember me" token

...

Deck of Cards
id bimRememberMeLogin
Card default true label URL / Resource / JSON Structure Resource: authorize  URL: https://api-stage.bimplus.net/v2/authorize JSON Structure:   Name Mandatory / Optional Type Description remember_me mandatory bool Set it to true remember_me_token mandatory string The "remember me" token client_id mandatory string The identifier of the used client application_id optional string The id of the application Card label HTTP Method  POST Card label Description It is not necessary for the user to enter the credentials each time. Instead, do it only if required, together with requesting the "remember me" token, and than use this remember token to generate the authentication token each time. Returns a BIMPlus-token for further API calls. These tokens are supported only for backward compatibility only and API will be removed in 2026. Card label Request Code Block borderColor Green lang xml title Headers Content-Type: application/json Code Block borderColor Red lang xml title JSON { "remember_me" : "true", "remeber_me_token": "b930e0179baf4f919caeab28328190a3", "application_id": "0106c8baad467c08e26f026852cb7525", "client_id": "0864b512-1776-4a55-8ee5-2b19d7d9b7ea", } Card label Response Code Block borderColor Green lang xml title Status Status: 200 OK Code Block borderColor Red lang xml title JSON { "access_token" : "e3a212b8f70e4b85b0ed826de7f775f6", "expires_in" : 28799, "application_id": "0106c8baad467c08e26f026852cb7525", "client_id": "0864b512-1776-4a55-8ee5-2b19d7d9b7ea", "token_type": "BimPlus" }

...