---
title: "To obtain an Access Token, an ID Token, and optionally a Refresh Token, the RP (Client)."
method: POST
path: "/restv1/token"
tags: ["Token"]
---

# To obtain an Access Token, an ID Token, and optionally a Refresh Token, the RP (Client).

`POST /restv1/token`

To obtain an Access Token, an ID Token, and optionally a Refresh Token, the RP (Client).

## Response `200`

OK

- object — AccessTokenResponse.
  - `access_token` string, required — The access token issued by the authorization server.
  - `token_type` string, required — The access token type provides the client with the information required to successfully utilize the access token to make a protected resource request (along with type-specific attributes).
  - `expires_in` integer — The lifetime in seconds of the access token. For example, the value \"3600\" denotes that the access token will expire in one hour from the time the response was generated.
  - `refresh_token` string — The refresh token, which can be used to obtain new access tokens using the same authorization grant
  - `scope` string[]
  - `id_token` string
  - `issued_token_type` string — Identifier for the type of the issued token. Present in token exchange responses. For example urn:ietf:params:oauth:token-type:id-jag or urn:ietf:params:oauth:token-type:txn-token.

## Other responses

- `400` — Invalid parameters provided to endpoint.
- `401` — Unauthorized access request.
- `403` — Invalid details provided hence access denied.
- `500` — Internal error occured. Please check log file for details.

## Changes

- **2026-06-18** `1f18fed84393` — 7 info
  - added the new optional request property `actor_token`
  - added the new optional request property `actor_token_type`
  - added the new optional request property `audience`
  - added the new optional request property `requested_token_type`
  - …3 more
- **2026-04-08** `e60fb909da19` — 1 info
  - endpoint added
- **2022-03-25** `d6fc0677410c` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/janssenproject/apis/janssen-authorization-server/changes/restv1/token/post.md)

---

[API](https://skmtc.dev/janssenproject/apis/janssen-authorization-server.md) · [All operations](https://skmtc.dev/janssenproject/apis/janssen-authorization-server/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/janssenproject/janssen-authorization-server/revisions/2a44b59497de/schema)