API OAuth2

Get Authorization Token

post

This request is used by Thales to retrieve an OAUTH 2.0 access authorization token to be used for outgoing issuer API requests.

Parámetros de encabezado

authorizationstringRequerido

The authorization header includes a client secret in base64URL encoded format following this syntax: Basic "[clientId:client secret]" as per https://www.rfc-editor.org/rfc/rfc2617

Example: Basic aXNfdGJhbmswMToxMjM=

Cuerpo

application/x-www-form-urlencoded

grant_typestring · enumRequeridoValores posibles:

scopestringOpcional

Access request scope as optionally defined by the issuer

Respuestas

200

Default allowed response

application/json

access_tokenstringSolo lecturaRequerido

The access token issued by the authorization server

Example: ey...HRT6LOON7w

expires_instringSolo lecturaOpcional

Remaining time in seconds for the access_token to expire.

Example: 900

scopestringSolo lecturaOpcional

Scope of the access_token.

token_typeundefined · enumRequerido

Type of the access_token that will be used to call Issuer APIs.

Example: BearerValores posibles:

expires_atstringSolo lecturaOpcional

Access token expiration timestamp

Example: 2023-06-06T05:05:59.711Z

400

Bad request

post

/oauth2/token

HTTPcURLJavaScriptPython

POST /authz/d1/v1/oauth2/token HTTP/1.1
Host: YOUR_DOMAIN
authorization: Basic aXNfdGJhbmswMToxMjM=
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 50

"grant_type='client_credentials'&scope='text'"

{
  "access_token": "ey...HRT6LOON7w",
  "expires_in": "900",
  "scope": "text",
  "token_type": "Bearer",
  "expires_at": "2023-06-06T05:05:59.711Z"
}