Authenticated Requests

Once you have an access token, you can make authenticated requests to the AniList API on behalf of the user.

To make authenticated requests, you will need to include the access token in the Authorization header of your request as a "Bearer" token.

Javascript

const fetch = require('node-fetch');

var query = `
{
  Viewer {
    id
    name
  }
}
`;
const accessToken = getAccessToken();

const url = 'https://graphql.anilist.co',
	options = {
		method: 'POST',
		headers: {
			'Authorization': 'Bearer ' + accessToken,
			'Content-Type': 'application/json',
			'Accept': 'application/json',
		},
		body: JSON.stringify({
			query: query
		})
	};

fetch(url, options).then(handleResponse, handleError);

function handleResponse(response) {
	console.log(response);
}

PHP

$query = '
{
  Viewer {
    id
		name
  }
}
';
$accessToken = getAccessToken();

$http = new GuzzleHttp\Client;
$response = $http->request('POST', 'https://graphql.anilist.co', [
    'headers' => [
        'Authorization' => 'Bearer ' . $accessToken,
        'Accept' => 'application/json',
        'Content-Type' => 'application/json',
    ],
]);

JWT Tokens

The access tokens provided by the authorization flows are JWT tokens. You can use a JWT library to decode the token and get the user's ID, expiration date, and other information.

You can try it out yourself on your own tokens by pasting them into jwt.io.