Changes

Canvas allows for programmatic access to some pieces of information via the [http://instructure.github.com/canvas-lms==<font color="#ff0000" face="verdana,arial" size="4">Office 365 CHECKLIST</doc/api/ Canvas API]. API calls require authorization, and are made on behalf of an authorized user. The information returned will be different depending on the user you are representing, their roles and permissions. We are using OAuth2 for remote services to allow access to resources (note: we haven't yet completely the typical Oauth-user delegation flow, but have a pre-generation utility that can be used in the mean time), which means that all API calls will need to be over https, and will require an access token as a means of representing the user.font>==

You can see *1. '''Ensure you have activated your MyMCLA account and know what the most up-correct password is.'''**Click here for instructions on how to-date [http://instructure[Activate your MyMCLA Account]].github.com/canvas-lms/doc/api/API documentation **Click here for instructions on githubhow to [[Reset a Lost MyMCLA Account Password]] (note: this link is to the most up-to-date API interface, which may or may not be accurate for locally installed instances of Canvas. If you are not using Canvas Cloud, talk to you site administrator about getting an accurate set of API documentation. Admins, you can generate this documentation by running rake doc:api on the console).

[[Image:approved_integrations*4.png|300px|thumb|right|Approved Integrations on the user profile page]][[Image:generate_an_access_token.png|300px|thumb|right|Generating an access token]][[Image:access_token_details.png|300px|thumb|right|Reviewing access token details]] In a user's profile, there is a section titled, "Approved Integrations". This is a way for a user to create an access token that can be shared with a third party, giving the remote service permission to access Canvas resources on behalf ''Beware of Bookmarks!'''**Users should not bookmark the userPortal Login Page. The user can give Using a name bookmark may fail to load the external tool for easier identification, set an expiration, and even revoke access to page because it has old session information stored with the API by deleting the tokenURL that was saved. Once you have a Canvas It is best to login you can create one of these access tokens to use for testing your development projects. Copy down the token string. This token must be included as a URL query parameter in any API calls made to Canvas.<div style="clear: right;"></div> == Making API Calls With an Access Token == All API calls must also be made over https. The access token must be included as a URL query parameter in any API calls made to Canvas. For example, Portal Page by typing the endpoint to grab address directly into the user's list of courses is  <pre>GET /api/v1/coursesweb browser (sso.json</pre> If Bob's access token were "token_of_magical_power" then you would call <pre>GET /api/v1/coursesmcla.json?access_token=token_of_magical_powers</pre> to retrieve Bob's list of courses. For edu) or clicking a detailed example of using the API, check out the [http://instructure.github.com/canvas-lms/doc/api/basics.html API basics documentation redirect found on github]a MCLA website.