---
title: "Get WebView Token"
method: POST
path: "/v2/auth/issuers/{organizationId}/users/{userId}/token"
tags: ["users > WebView"]
---

# Get WebView Token

`POST /v2/auth/issuers/{organizationId}/users/{userId}/token`

## Request

- Base URL: `https://rewards-api.getkard.com`
- URL: `https://rewards-api.getkard.com/v2/auth/issuers/{organizationId}/users/{userId}/token`
- Auth: HTTP bearer

Retrieves an OAuth token for webview authentication.

## Path parameters

- `organizationId` string, required: Your issuer organization ID, provided by Kard
- `userId` string, required: The ID of the user as defined on the issuers system

## Response `200`

Response with status 200

- UsersAuthWebViewTokenResponse: An OAuth token response.
  - `access_token` string, required
  - `expires_in` integer, required
  - `token_type` string, required

## Other responses

- `401`: Error response with status 401
- `429`: The issuer's traffic grew faster than its allowed rate, or the endpoint's own limit was reached. If the response includes a `Retry-After` header, wait that many seconds before retrying. See [Rate Limits](/2024-10-01/api/integration-guides/rate-limits).
- `500`: Error response with status 500

## Changes

- **2026-10-22** `4e87fc8b018b`: 1 info
  - added the non-success response with the status `429`

[Operation history](https://skmtc.dev/getkard/apis/getkard-2/changes/v2/auth/issuers/:organizationId/users/:userId/token/post.md)

---

[API](https://skmtc.dev/getkard/apis/getkard-2.md) - [All operations](https://skmtc.dev/getkard/apis/getkard-2/llms.txt) - [OpenAPI document](https://skmtc.dev/getkard/apis/getkard-2/revisions/bd47764afa21?raw)