---
title: "User or Application´s authentication/authorization."
method: POST
path: "/authorize"
tags: ["security"]
---

# User or Application´s authentication/authorization.

`POST /authorize`

User or Application´s authentication/authorization.

## Headers

- `X-Application-Id` string, required
- `X-Company-Id` string, required
- `X-User-Id` string, required
- `X-Trace-Id` string

## Request body

- AuthenticationRequest — Authentication Request Entity
  - `clientId` string — Application client indentification
  - `clientSecret` string — Application client secret code
  - `grantType` string — resource_owner-broker, resource_owner-customer, resource_owner-employe

## Response `200`

Successful

- AuthenticationResponse — Authentication Response Entity
  - `code` string — Hash of grantType, clientId and ClientName

## Other responses

- `204` — No content responses
- `400` — Bad request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Data not found
- `405` — Data input not supplied or invalid
- `406` — Exception

---

[API](https://skmtc.dev/hdi/apis/api-authentication-and-authorization.md) · [All operations](https://skmtc.dev/hdi/apis/api-authentication-and-authorization/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hdi/api-authentication-and-authorization/revisions/216d39155ad4/schema)