Auth

Exchange an API key or refresh token for a Bearer token

Authenticates using either an API key or a refresh token and returns a short-lived Bearer token plus a new refresh token. This endpoint is exempt from Bearer authentication and global rate limiting. It has its own IP-based rate limit.

post/api/auth/token

Request

  • Base URL: https://api.wondercal.com
  • URL: https://api.wondercal.com/api/auth/token
  • Auth: none required

Request body

apiKeystring

API key starting with 'wcal_'

refreshTokenstring

Refresh token from a previous token exchange

Example request

{
  "apiKey": "wcal_aBcDeFgHiJkLmNoPqRsTuVwXyZ012345678901234",
  "refreshToken": "v02.local.abc123..."
}

Response

Token exchange succeeded

Example response

{
  "data": {
    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
    "refreshToken": "v02.local.abc123..."
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.