Receipt of Waste - API authentication Guide

To start using the Receipt API, you need your Client ID and Secret which you should have received via email. You will need this to apply to the OAuth service for an access token.

This process involves two steps:

Submit the client id and secret to the OAuth service to be granted an access token. See the python code snippet below.

import requests  #use requests library
import base64 
def get_cognito_token(client_id, client_secret, token_url): # your clientID, Client Secret and OAuth URL
    client_credentials = f"{client_id}:{client_secret}"
    encoded_credentials = base64.b64encode(client_credentials.encode()).decode() 
    headers = { "Authorization": f"Basic {encoded_credentials}", "Content-Type": "application/x-www-form-urlencoded" }
    payload = { "grant_type": "client_credentials", "client_id": client_id, "client_secret": client_secret, }
    response = requests.post(f"{token_url}/oauth2/token", headers=headers, data=payload) 
    response.raise_for_status() 
    token_response = response.json() 
    return token_response["access_token"]

Submit the access/bearer token to use the API. See the python code snippet below.

import requests 
def make_api_request(access_token, api_url): # your access token and the api url here
    headers = { "Authorization": f"Bearer {access_token}" } 
    response = requests.get(api_url, headers=headers)
    response.raise_for_status() 
    return response.json()

Sequence Diagram for Authentication Flow

Mermaid Diagram Example

sequenceDiagram participant Third Party Software participant OAuth participant Receipt API Third Party Software->>OAuth: Client ID + Secret OAuth-->>Third Party Software: Bearer Token Third Party Software->>Receipt API: POST Receipt API + Bearer Token Receipt API -->>Third Party Software: Result of Waste Movement Request (Success/Failure)

Production: https://waste-movement-external-api-75ee2.auth.eu-west-2.amazoncognito.com

Test: https://waste-movement-external-api-8ec5c.auth.eu-west-2.amazoncognito.com

Page last updated on November 20th 2025.

Receipt of Waste - API authentication Guide

What is the OAuth login URL for my API?