---
title: "To obtain an Access Token, an ID Token, and optionally a Refresh Token, the RP (Client)."
method: POST
path: "/token"
tags: ["Token"]
---

# To obtain an Access Token, an ID Token, and optionally a Refresh Token, the RP (Client).

`POST /token`

To obtain an Access Token, an ID Token, and optionally a Refresh Token, the RP (Client).

## Response `200`

OK

- object — AccessTokenResponse.
  - `access_token` string, required — The access token issued by the authorization server.
  - `token_type` string, required — The access token type provides the client with the information required to successfully utilize the access token to make a protected resource request (along with type-specific attributes).
  - `expires_in` integer — The lifetime in seconds of the access token. For example, the value \"3600\" denotes that the access token will expire in one hour from the time the response was generated.
  - `refresh_token` string — The refresh token, which can be used to obtain new access tokens using the same authorization grant
  - `scope` string[]
  - `id_token` string

## Other responses

- `400` — Invalid parameters provided to endpoint.
- `401` — Unauthorized access request.
- `403` — Invalid details provided hence access denied.
- `500` — Internal error occured. Please check log file for details.

## Changes

- **2022-03-25** `d6fc0677410c` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/janssenproject/apis/janssen-authorization-server/changes/token/post.md)

---

[API](https://skmtc.dev/janssenproject/apis/janssen-authorization-server.md) · [All operations](https://skmtc.dev/janssenproject/apis/janssen-authorization-server/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/janssenproject/janssen-authorization-server/revisions/ae174ecfdc21/schema)