OAuth2 API

Get Authorization Token

post

This request is used by Thales to retrieve an OAUTH 2.0 access authorization token to be used for outgoing issuer API requests.

ヘッダーパラメータ

authorizationstring必須

The authorization header includes a client secret in base64URL encoded format following this syntax: Basic "[clientId:client secret]" as per https://www.rfc-editor.org/rfc/rfc2617

Example: Basic aXNfdGJhbmswMToxMjM=

本文

grant_typestring · enum必須可能な値:

scopestringオプション

Access request scope as optionally defined by the issuer

レスポンス

200

Default allowed response

application/json

access_tokenstring読み取り専用必須

The access token issued by the authorization server

Example: ey...HRT6LOON7w

expires_instring読み取り専用オプション

Remaining time in seconds for the access_token to expire.

Example: 900

scopestring読み取り専用オプション

Scope of the access_token.

token_typeundefined · enum必須

Type of the access_token that will be used to call Issuer APIs.

Example: Bearer可能な値:

expires_atstring読み取り専用オプション

Access token expiration timestamp

Example: 2023-06-06T05:05:59.711Z

400

Bad request

post/oauth2/token

POST /authz/d1/v1/oauth2/token HTTP/1.1
Host: YOUR_DOMAIN
authorization: Basic aXNfdGJhbmswMToxMjM=
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 50

"grant_type='client_credentials'&scope='text'"

{
  "access_token": "ey...HRT6LOON7w",
  "expires_in": "900",
  "scope": "text",
  "token_type": "Bearer",
  "expires_at": "2023-06-06T05:05:59.711Z"
}