Token endpoint

Using client credentials

Use the token endpoint to retrieve an access token which can be used to authorize API requests. This endpoint supports the Authorization Code grant, the Refresh Token grant and the Client Credentials grant.

post/v6/authentication/oauth2/token{client_credentials}

Request

  • The document declares no server URL.
  • Auth
    none declared

Request body application/x-www-form-urlencoded

client_idstring

Application client ID.

client_secretstring

Application client secret.

grant_typestring

Identifies the grant type being used. For Authorization Code grant use authorization_code.

scopestring

List of scopes to request to be granted to the access token. Can only be a subset of the scopes requested in the Authorize application request. When not passed, all the scopes will be requested.

Example request

{
  "client_id": "00000000-0000-0000-0000-000000000000",
  "client_secret": "00000000-0000-0000-0000-000000000000",
  "scope": "offline asset:read"
}

Response

Successful response

refresh_tokenstring
token_typestring
expires_ininteger
access_tokenstring
scopestring

Example response

{
  "refresh_token": "c12e...b5dc",
  "token_type": "bearer",
  "expires_in": 3600,
  "access_token": "eyJh...NDcw",
  "scope": "offline asset:read"
}

Changes

No recorded changes to this operation across all 2 revisions of this API.