acc-api-setup

ACC / APS API Setup & Authentication

Set up Python access to Autodesk Construction Cloud for:

"$ARGUMENTS"

Prerequisites

Before writing any code, the user needs:

1. An APS app registered at APS Developer Portal
2. A Client ID and Client Secret from their app
3. The app provisioned to their ACC account (ACC Admin → Apps & Integrations → Custom Integrations)
4. Python 3.8+ with requests installed (pip install requests)

Ask the user which flow they need:

• 2-legged (server-to-server, no user login) — for automation scripts, reporting, data extraction
• 3-legged (user authorises in browser) — for user-specific data: issues, RFIs, personal ACC content

---

Script 1: 2-Legged Token (Client Credentials — most common for automation)

import os
import requests
import base64
import time

# ── Configuration — use environment variables, never hardcode secrets ─────────
CLIENT_ID     = os.environ.get("APS_CLIENT_ID", "YOUR_CLIENT_ID")
CLIENT_SECRET = os.environ.get("APS_CLIENT_SECRET", "YOUR_CLIENT_SECRET")

# Scopes for typical ACC read/write operations
SCOPES = "data:read data:write account:read"

APS_AUTH_URL = "https://developer.api.autodesk.com/authentication/v2/token"
# ─────────────────────────────────────────────────────────────────────────────

class APSClient:
    """Reusable APS client that auto-refreshes the 2-legged token."""

    def __init__(self, client_id, client_secret, scopes):
        self.client_id     = client_id
        self.client_secret = client_secret
        self.scopes        = scopes
        self._token        = None
        self._expires_at   = 0

    def _credentials_header(self):
        """Base64-encode client_id:client_secret for Basic auth (OAuth2 v2)."""
        creds = base64.b64encode(
            (self.client_id + ":" + self.client_secret).encode()
        ).decode()
        return "Basic " + creds

    def get_token(self):
        """Return a valid access token, refreshing if needed."""
        if self._token and time.time() < self._expires_at - 60:
            return self._token

        resp = requests.post(
            APS_AUTH_URL,
            headers={
                "Authorization": self._credentials_header(),
                "Content-Type":  "application/x-www-form-urlencoded",
            },
            data={
                "grant_type": "client_credentials",
                "scope":      self.scopes,
            }
        )
        resp.raise_for_status()
        data = resp.json()
        self._token      = data["access_token"]
        self._expires_at = time.time() + data["expires_in"]
        return self._token

    def headers(self):
        """Return headers dict ready to pass to any APS API call."""
        return {
            "Authorization": "Bearer " + self.get_token(),
            "Content-Type":  "application/json",
        }

    def get(self, url, params=None):
        r = requests.get(url, headers=self.headers(), params=params)
        r.raise_for_status()
        return r.json()

    def post(self, url, payload):
        r = requests.post(url, headers=self.headers(), json=payload)
        r.raise_for_status()
        return r.json()

    def patch(self, url, payload):
        r = requests.patch(url, headers=self.headers(), json=payload)
        r.raise_for_status()
        return r.json()


# ── Usage example ─────────────────────────────────────────────────────────────
if __name__ == "__main__":
    client = APSClient(CLIENT_ID, CLIENT_SECRET, SCOPES)
    print("Token acquired:", client.get_token()[:20] + "...")