The OAuth flow

The first step is to redirect the user to the Qonto OAuth server.

The user will be invited to authenticate.

Then he will have to to allow your application to access his account.

See the Login endpoint documentation for a detailed description of this step.

Once user has granted access to his account, he will be rederected to your application via your redirect_uri with a temporary authorization code.

On your backend, you will have to exchange this code for an access_token.

See the Token endpoint documentation for a detailed description of this step.

To perform authenticated requests on the Qonto API, you will have to provide the access_token in the Authorization header, as describe in this example:

curl GET 'https://thirdparty.qonto.com/organization' \
--header 'Accept: application/json' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer _YOUR_ACCESS_TOKEN_' \
    
Response: 200
{
    "organization": { ... }
}