Authentication

The StubHub API uses OAuth2 for all authentication. OAuth2 is a protocol that lets external applications access public StubHub resources and private StubHub user details without getting their password.

info

Tokens are passwords. Keep in mind that your application's Client ID and Client Secret and all access tokens should be considered as sensitive as passwords and should not be shared.

📄️ Basic Steps

High-level steps for authenticating your application.

📄️ Application-Only Authentication Flow

Obtain access to public, non-user-specific data (events, venues, etc)

📄️ User-Login Authentication Flow

Obtain access to user-specific data.

📄️ Token Expiration

Handling expired access tokens.

📄️ Scopes

Specify what type of access is needed by your application.