Authorization
To start working with Veeam Backup for Microsoft Azure RESTful API, clients must authenticate themselves on the Veeam Backup for Microsoft Azure server. The authorization process is based on the OAuth 2.0 Authorization Framework and involves obtaining an access token and a refresh token:
- An access token is a string that represents authorization granted to clients and must be used in all requests during the current session.
- A refresh token is a string that represents authorization granted to clients and can be used to obtain a new access token when the current access token expires.
To obtain a pair of tokens, a client sends a POST HTTPS request to the token path as described in Obtaining Token.
A successfully completed operation returns a 200 Success response code along with both the access and the refresh token in the response body. A refresh token must be saved locally.
To obtain a new pair of tokens in case the access token expires or becomes invalid, the client sends the POST HTTPS request with the refresh token in the request body to the token path. A successfully completed operation returns a 200 Success response code and a new pair of tokens in the response body.
The given access token expires in 60 minutes once issued.