---
title: "Poll for the device-authorization result (RFC 8628)"
method: POST
path: "/auth/device/token"
---

# Poll for the device-authorization result (RFC 8628)

`POST /auth/device/token`

## Request

- Base URL: `https://api.vakantio.de`
- URL: `https://api.vakantio.de/auth/device/token`
- Auth: none required

Poll with the device_code until the user approves. Returns HTTP 400 with error=authorization_pending while waiting (also slow_down, expired_token, access_denied per RFC 8628); on success returns the access token to use as a Bearer token.

## Request body

- object
  - `device_code` string, required

## Response `200`

Access token once approved

- object
  - `access_token` string
  - `token_type` string

## Other responses

- `400`: authorization_pending / slow_down / expired_token / access_denied
- `4XX`: Client error — JSON body with a stable `error` code (e.g. not_found, not_authenticated, request_failed) and an optional `hint`.
- `5XX`: Server error — JSON body with `error: "server_error"`.

---

[API](https://skmtc.dev/vakantio/apis/vakantio-api.md) · [All operations](https://skmtc.dev/vakantio/apis/vakantio-api/llms.txt) · [OpenAPI document](https://skmtc.dev/vakantio/apis/vakantio-api/revisions/2e1306807326?raw)