API Fundamentals
Making Requests and Authentication
Learn how to construct well-formed API requests, set essential headers, and implement robust authentication.
Making Requests
To interact with the Dwolla API, all requests must include the Accept
header:
Accept: application/vnd.dwolla.v1.hal+json
For POST requests, specify either of the following Content-Type
:
Content-Type: application/vnd.dwolla.v1.hal+json
Content-Type: application/json
All request and response bodies are JSON encoded.
Requests must be made over HTTPS. Any non-secure requests will be redirected (HTTP 302) to the HTTPS equivalent URI.
Authentication
All requests require either an OAuth access token or a client_id
and client_secret
in order to authenticate with the API. OAuth access tokens are passed via the Authorization HTTP header:
Authorization: Bearer {access_token_here}
API Host
Production: https://api.dwolla.com
Sandbox: https://api-sandbox.dwolla.com