Authentication

Use server-to-server authentication credentials that allow your application's server to generate access tokens and make API calls.

Overview

For your application to generate an access token, an end user doesn't need to sign in or provide consent to your application. Instead, your application can use its credentials (Client ID and Secret) to authenticate itself and generate access tokens. Your application can then use these to call Adobe APIs and services on its behalf.

This is sometimes referred to as "two-legged OAuth".

Automate your token generation by calling the endpoint using standard OAuth2 libraries. Using industry-standard libraries is the quickest and most secure way of integrating with OAuth. Be diligent when choosing the OAuth 2.0 library that works best for your application. Your teams' projects likely leverage OAuth libraries already to connect with other APIs. It's recommended to use these libraries to automatically generate tokens when they expire.

Prerequisites

Work with your Adobe representative to get the following:

• An Adobe Developer Console account.
• A project with Photoshop API OAuth Server-to-Server credentials set up.
• Access to your Client ID and Client Secret from the Adobe Developer Console project. Securely store these credentials and never expose them in client-side or public code.

Retrieve an access token

A temporary access token validates calls to the API. This token can be generated directly in the Developer Console, or by following the steps below.

1. First, open a secure terminal and export your Client ID and Client Secret as environment variables so that later commands can access them:

Copy
export PS_FF_SERVICES_CLIENT_ID=<Your_Client_ID>
export PS_FF_SERVICES_CLIENT_SECRET=<Your_Client_Secret>
Copied to your clipboard
export PS_FF_SERVICES_CLIENT_ID=<Your_Client_ID>
export PS_FF_SERVICES_CLIENT_SECRET=<Your_Client_Secret>

2. Generate access tokens programmatically by sending a POST request:

Copy
curl -X POST 'https://ims-na1.adobelogin.com/ims/token/v3' \
-H 'Content-Type: application/x-www-form-urlencoded' \
-d 'grant_type=client_credentials' \
-d "client_id=$PS_FF_SERVICES_CLIENT_ID" \
-d "client_secret=$PS_FF_SERVICES_CLIENT_SECRET" \
-d 'scope=openid,AdobeID,read_organizations'
Copied to your clipboard
curl -X POST 'https://ims-na1.adobelogin.com/ims/token/v3' \
-H 'Content-Type: application/x-www-form-urlencoded' \
-d 'grant_type=client_credentials' \
-d "client_id=$PS_FF_SERVICES_CLIENT_ID" \
-d "client_secret=$PS_FF_SERVICES_CLIENT_SECRET" \
-d 'scope=openid,AdobeID,read_organizations'

The required parameters are:

• client_id: The Client ID.
• client_secret: The Client secret.
• scope: The scopes are openid, AdobeID, read_organizations.

The response will look like this:

Copy
{
    "access_token": "exampleAccessTokenAsdf123",
    "token_type": "bearer",
    "expires_in": 86399
}
Copied to your clipboard
{
    "access_token": "exampleAccessTokenAsdf123",
    "token_type": "bearer",
    "expires_in": 86399
}

Each access token is valid for 24 hours. To adhere to OAuth best practices, generate a new token every 23 hours.

3. Export your access token as an environment variable:

Copy
export PS_FF_SERVICES_ACCESS_TOKEN=<Your_Access_Token>
Copied to your clipboard
export PS_FF_SERVICES_ACCESS_TOKEN=<Your_Access_Token>

Execute an API call

Once you've created your token, you can make your first API call:

Copy
curl --request GET \
  --url https://image.adobe.io/pie/psdService/hello \
  --header "Authorization: Bearer $PS_FF_SERVICES_ACCESS_TOKEN" \
  --header "x-api-key: $PS_FF_SERVICES_CLIENT_ID"
Copied to your clipboard
curl --request GET \
  --url https://image.adobe.io/pie/psdService/hello \
  --header "Authorization: Bearer $PS_FF_SERVICES_ACCESS_TOKEN" \
  --header "x-api-key: $PS_FF_SERVICES_CLIENT_ID"

You'll see the response:

Copy
Welcome to the Photoshop API!
Copied to your clipboard
Welcome to the Photoshop API!

Congratulations! You made your first request to the Photoshop API.

Last updated 6/5/2025

Was this helpful?

Yes

No