---
title: "Application´s token request."
method: POST
path: "/token"
tags: ["security"]
---

# Application´s token request.

`POST /token`

Application´s token request.

## Headers

- `X-Application-Id` string, required
- `X-Company-Id` string, required
- `X-User-Id` string, required
- `X-Trace-Id` string
- `Content-Type` string, required

## Request body

- TokenRequest — Token Request Entity
  - `code` string — Hash of grantType, clientId and ClientName
  - `applicationCode` string — Application code

## Response `200`

Successful

- TokenResponse — Token Response Entity
  - `token` string — Token JWT
  - `tokenType` string — Token Type
  - `expiresIn` string — Expiration in milliseconds
  - `refreshToken` string — Refresh Token
  - `scope` string — Refresh Token

## Other responses

- `204` — No content responses
- `400` — Bad request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Data not found
- `405` — Data input not supplied or invalid
- `406` — Exception

---

[API](https://skmtc.dev/hdi/apis/api-authentication-and-authorization.md) · [All operations](https://skmtc.dev/hdi/apis/api-authentication-and-authorization/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hdi/api-authentication-and-authorization/revisions/216d39155ad4/schema)