---
title: "Authenticate via V1 Client Token"
method: POST
path: "/auth/client_token"
tags: ["Auth"]
---

# Authenticate via V1 Client Token

`POST /auth/client_token`

## Request body

- AuthorizeClientTokenRequestBody
  - `application_compat_client_id` string, uuid — Application Compat Client ID
  - `application_id` integer — Application ID
  - `application_user_id` string, required — Application User ID
  - `expire_at` integer, nullable — Expiration Time as unix timestamp
  - `signature` string, required — Client token derived signature

## Response `200`

OK

- AuthorizeResponseBody
  - `access_token` string, required — Access token
  - `user_info` UserInfo, required
    - `application_id` integer, required — Application ID
    - `application_user_id` string, required — Application user ID
    - `compat_application_client_id` string, uuid, required — Compat application client ID
    - `compat_application_client_token` string, uuid, required — Compat application client token
    - `created_at` string, date-time, nullable, required — Created at
    - `integrated_providers` UserInfoIntegratedProvider[], nullable, required — List of integrated providers
      - `created_at` string, date-time, required — Created at
      - `is_integration_broken` boolean, required — Is integration broken
      - `provider_integration_id` integer, nullable, required — Provider integration ID
      - `provider_slug` string, required — Provider slug
    - `uid` string, uuid, required — Spike Internal User ID

## Other responses

- `400` — Bad Request
- `404` — Not Found
- `422` — Unprocessable Entity
- `500` — Internal Server Error

---

[API](https://skmtc.dev/spikeapi/apis/application-user-api.md) · [All operations](https://skmtc.dev/spikeapi/apis/application-user-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/spikeapi/application-user-api/revisions/637338fb0c9d/schema)