Overview

Tiger's API uses the OAuth2.0 framework to protect business services. Before interacting with other APIs, your server must retrieve an Access Token using either Server Authorization or User Authorization. The Access Token is required to authenticate and authorize your server when calling other APIs.

Before the third-party platform (hereinafter referred to as "the App") can use Tiger's API, the platform must first complete the registration of company and App information as described in App Registration.

The third-party platform must keep the client_secret secure and must not disclose it to any user or third party. If a leak is discovered, please contact us immediately for replacement.

For FA clients, use Server Authorization to authorize your server to interact with Tiger's API.

For FA clients, requests must include the additional HTTP header X-TIGR-UID={uid} (except for certain endpoints that do not require a uid), where uid is the Tiger user ID generated after the user registers.

For third-party agents, use User Authorization to acquire individual user authorization, allowing your application to use Tiger's API on behalf of the user.

Reference