---
title: "Retrieve an authorisation token"
method: POST
path: "/oidc/token"
tags: ["auth"]
---

# Retrieve an authorisation token

`POST /oidc/token`

## Request

- Base URL: `https://identity.moneyhub.co.uk`
- URL: `https://identity.moneyhub.co.uk/oidc/token`
- Auth: HTTP basic

Requires **Basic** auth header to be sent with the **client-id** & **client-secret** base64 encoded

## Request body `application/x-www-form-urlencoded`

- object
  - `grant_type` 'client_credentials' | 'authorization_code' | 'refresh_token', required: Type of grant token required
  - `scope` string, required: The required scopes
  - `sub` string: The user-id of the specific user
  - `code` string: The authorization code for use when doing a client secret basic auth
  - `redirect_uri` string: The redirect URI
  - `client_id` string: The client id for use when doing a private key JWT auth
  - `client_assertion` string: For use when doing a private key JWT auth
  - `client_assertion_type` string: For use when doing a private key JWT auth

## Response `200`

A successful token retrieval response

- Token
  - `access_token` string, required: Access Token
  - `expires_in` integer, required: Token Expiry
  - `token_type` string, required: Type of token granted
  - `scope` string: The granted scopes

## Other responses

- `403`: Unsuccessful Response - Invalid scopes

## Changes

- **2026-11-03** `e004d9ee1fdb`: 2 warning
  - removed the optional property `id` from the response with the `403` status
  - removed the optional property `userId` from the response with the `403` status

[Operation history](https://skmtc.dev/moneyhubenterprise/apis/moneyhub-identity-service/changes/oidc/token/post.md)

---

[API](https://skmtc.dev/moneyhubenterprise/apis/moneyhub-identity-service.md) - [All operations](https://skmtc.dev/moneyhubenterprise/apis/moneyhub-identity-service/llms.txt) - [OpenAPI document](https://skmtc.dev/moneyhubenterprise/apis/moneyhub-identity-service/revisions/e004d9ee1fdb?raw)