Token

Request

This API is intended to allow the Partner to authenticate and obtain an access token from B. The Partner sends their client_id and client_secret (using grant_type: client_credentials) to B's token endpoint. B validates these credentials and, if successful, returns a Bearer access_token, token_type, and expires_in. This access token must be included in the Authorization header (e.g., Authorization: Bearer ) for all subsequent API calls to B's protected resources.

Request Body

This request uses the x-www-form-urlencoded body type.

Response

The response for this request is a JSON object with the following properties:

access_token (string): The access token for the identity verification.

token_type (string): The type of token.

expires_in (integer): The duration for which the token is valid.

scope (string): The scope of the token.

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

Responses

🟢200Success

application/json

Bodyapplication/json

Example

{
    "access_token": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
    "token_type": "Bearer",
    "expires_in": 3600,
    "scope": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
}

🟠400Invalid Client

Token

Request#

Request Body#

Response#

Request

Request Code Samples

Responses

Request

Request Body

Response