Authentication

Get Access Token

The endpoint activates an access token by exchanging an authorization code.

<Warning> **Important Notes:**
  • Access token duration is 300 seconds
  • The IP of the client must be added to WB Allowlist </Warning>

Request Headers:

  • Content-Type: application/x-www-form-urlencoded
post/oauth2/token

Request

Request body application/x-www-form-urlencoded

client_idstring required

The application's client ID

client_secretstring required

The application's client secret

codestring required

The authorization code received from the authorization endpoint

Example request

{
  "client_id": "YOUR_CLIENT_ID",
  "client_secret": "YOUR_CLIENT_SECRET",
  "code": "AUTHORIZATION_CODE"
}

Response

Successful token exchange

Example response

{
  "data": {
    "access_token": "MZM1MDBMMJYTNWM4MI0ZNTIYLTKXNDATNZY1MZHKM2Y2MJY3",
    "expires_in": 300,
    "refresh_token": "ODK5ZTVKZDUTYTI5ZC01NWJHLTGZZDMTYWFKYTNMNJHHMGZM",
    "scope": "codes.apply,show.userinfo",
    "token_type": "Bearer"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.