MOmonato
Authentication

Create authentication token

Changed on

Exchanges a client_secret for a JWT bearer token. Use the returned token in the Authorization: Bearer <token> header for authenticated Fincore endpoints. Tokens expire; create a new token after receiving 401 Unauthorized.

post/v1/clients/{clientId}/auth/credential-tokens

Request

Path parameters

clientIdstring uuid required

Unique identifier for the client.

Request body

client_idstring required

Client UUID associated with the credential.

client_secretstring required

Client secret returned by the credential bootstrap endpoint.

Example request

{
  "client_id": "c2d1d1e3-3340-4170-980e-e9269bbbc551",
  "client_secret": "your_client_secret_here"
}

Response

Successfully created credential token.

idstring uuid required

Unique identifier of the generated credential token.

client_idstring uuid required

Client UUID associated with the token.

client_credential_idstring uuid required

Client credential UUID used to create the token.

tokenstring required

JWT authentication token

status'ACTIVE' | 'INACTIVE' required

Token lifecycle status.

expires_atstring required

Mexico City local time (UTC-6) when the token expires. Unlike the audit timestamps in this response, this value is returned without a UTC offset. Interpret it as UTC-6; do not treat it as UTC.

created_atstring date-time required

Mexico City local time (UTC-6) when the token was created, including the -06:00 offset.

updated_atstring date-time required

Mexico City local time (UTC-6) when the token was last updated, including the -06:00 offset.

deleted_atstring nullable required

Timestamp when the token was deleted, or null if active.

Example response

{
  "id": "1307f4e3-3960-4b98-9a14-0b6839245cc9",
  "client_id": "c2d1d1e3-3340-4170-980e-e9269bbbc551",
  "client_credential_id": "e981c6d8-4d49-45f2-a7ee-f956dca15500",
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjbGllbnRfaWQiOiJjMmQxZDFlMy0zMzQwLTQxNzAtOTgwZS1lOTI2OWJiYmM1NTEiLCJleHAiOjE3NDEyODE0MTl9.ziSqMClLqwUVfyM15bqUF_7-PINY0ZiWkH01s8pO3gA",
  "status": "ACTIVE",
  "expires_at": "2025-03-06 11:16:59.491631",
  "created_at": "2025-03-05 11:16:59.488685-06:00",
  "updated_at": "2025-03-05 11:16:59.488685-06:00"
}

Changes

  • e22ef66945dfRevision changes
    • breaking

      for the path request parameter clientId, the format changed from no format to uuid

    • breaking

      the response's property format changed from date-time to no format for status

    • info

      api tag Authentication added

    • info

      added the non-success response with the status

    • info

      added the non-success response with the status

    • info

      added the non-success response with the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status