We are currently working on integrating the AEC Data Model query API into our backend. In order to query the AEC Data Model, the API requires a 3-legged OAuth token to access hubs, projects, and their associated data. However, since we are only using our own hubs to store and access files, we would like to avoid the need for reauthorization every time. We already have the hub ID and project ID, and we would prefer to use a 2-legged OAuth token to access the files.

Is there a way to use a 2-legged token to access the data stored in the hubs? Alternatively, is there a method to automate the process of obtaining the 3-legged token so that we do not need to sign in each time?

One possible approach could involve using a refresh token to generate a new access token, but this would still require initial login. We would like to avoid this as well.

Could anyone provide guidance on how to solve this issue or suggest a better approach?