Exchange client credentials for access token

POST

/oauth2/token

const url = 'https://example.com/oauth2/token';
const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/x-www-form-urlencoded'},
  body: new URLSearchParams({
    client_id: 'my-service-account',
    client_secret: 'secret-value',
    grant_type: 'client_credentials'
  })
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request POST \
  --url https://example.com/oauth2/token \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data client_id=my-service-account \
  --data client_secret=secret-value \
  --data grant_type=client_credentials

Authenticates a service account using OAuth2 client credentials grant and returns a JWT access token valid for 1 hour.

Request Body

application/x-www-form-urlencoded

object

client_id

required

Service account ID

string

Example

my-service-account

client_secret

required

Service account secret

string

Example

secret-value

grant_type

required

OAuth2 grant type (only ‘client_credentials’ supported)

string

Allowed values: client_credentials

Example

client_credentials

Responses

200

Authentication successful

application/json

object

access_token

required

JWT access token

string

expires_in

required

Token validity in seconds

number

token_type

required

Token type

string

Allowed values: Bearer

Example

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expires_in": 3600,
  "token_type": "Bearer"
}

400

Unsupported grant type

application/json

object

error

required

Error message

string

Example

{
  "error": "invalid_client"
}

401

Invalid client credentials

application/json

object

error

required

Error message

string

Example

{
  "error": "invalid_client"
}