# Oauth 2.0 Authorization

Before you access any data stored WorkSmart via Web API, you must first request an `Access Token`. No data is accessible via the Web API without sending a valid `Access Token`.

You can obtain `Access Token` using two ways :

* Using Authorization Code (Auth Code Flow) – recommended
* Using Client Credentials