> ## Documentation Index > Fetch the complete documentation index at: https://www.canva.dev/docs/apps/llms.txt > Use this file to discover all available pages before exploring further. # Authentication The Canva REST APIs for managing OAuth tokens. The `oauth` endpoints enable you to generate, refresh, introspect, and revoke access tokens for your app. The endpoints implement the OAuth 2.0 Authorization Code flow with Proof Key for Code Exchange (PKCE). For more information, see [Authentication](https://www.canva.dev/docs/apps/rest-apis/authentication/). ## Authentication APIs * [Generate an access token](https://www.canva.dev/docs/apps/rest-apis/reference/authentication/generate-access-token/): Generate access tokens to access the Canva REST APIs. * [Introspect an access token](https://www.canva.dev/docs/apps/rest-apis/reference/authentication/introspect-access-token/): Introspect a token to see its validity and properties. * [Revoke a token](https://www.canva.dev/docs/apps/rest-apis/reference/authentication/revoke-token/): Revoke a token and its lineage.