​

Production Authentication

​

Differences from Sandbox

​

mTLS Setup

1. Generate CSR (Certificate Signing Request)
2. Submit CSR to FinHub
3. Receive signed certificate
4. Install certificate in your application

​

Authentication Request

curl -X POST "https://gateway.finhub.cloud/oauth/token" \
  --cert client.crt \
  --key client.key \
  -H "Content-Type: application/json" \
  -d '{
    "grant_type": "client_credentials",
    "client_id": "YOUR_PROD_CLIENT_ID",
    "client_secret": "YOUR_PROD_CLIENT_SECRET"
  }'

​

Token Management

• Tokens expire after 1 hour
• Implement proactive refresh (at 80% lifetime)
• Cache tokens appropriately
• Handle 401 errors with re-authentication