PApasito
Token

Exchange a signed client assertion for an access token

OAuth2 client-credentials with private_key_jwt client authentication. There is no client secret: you sign a short-lived JWT assertion with the private key you downloaded when the credential was created, and receive a bearer token valid for one hour.

post/oauth/token

Request

  • Base URL
    https://api.pasito.ai
  • Auth
    none required

Request body

grant_typestring required

Must be client_credentials.

client_assertion_typestring

Must be urn:ietf:params:oauth:client-assertion-type:jwt-bearer.

client_assertionstring

A JWT signed with your credential private key (RS256). iss and sub are both your credential id, aud is this token endpoint, and it must carry jti, iat and a short exp.

client_idstring

Optional; if sent it must equal the assertion sub.

client_secretstring

Not supported. Present only so the error is explicit.

scopestring

Not used. Access is granted per API feature, not per scope.

Response

A successful token response.

access_tokenstring required

A bearer token for /v1 requests.

token_type'Bearer' required
expires_ininteger required

Lifetime in seconds. Cache and reuse until it elapses.

Changes

No recorded changes to this operation across all 1 revision of this API.