Authenticate to the PowerSchool SIS REST API using the plugin OAuth flow and read student records

Steps

1. Register a data provider plugin in the PowerSchool SIS admin console under System > Plugin Management Configuration; the plugin XML manifest declares the required data access scopes.
2. After plugin installation, retrieve the generated Client ID and Client Secret from the plugin's Data Provider Configuration screen.
3. Exchange credentials for an access token by POSTing to https://<ps-host>/oauth/access_token with a Basic Authorization header (Base64-encoded client_id:client_secret) and body grant_type=client_credentials.
4. Include the returned access_token as a Bearer token in subsequent API calls, e.g., GET /ws/v1/student with Accept: application/json to list students.
5. Use the pagesize and page query parameters for pagination, and filter with q=(last_name==Smith) using PowerSchool's PowerQuery syntax for server-side filtering.
6. For expanded student data, use the expansions parameter (e.g., expansions=demographics,addresses) rather than making multiple requests per student.