POST /Authentication/Authority/Token — Obtain Access Token
Obtain a JWT Bearer token using Basic Auth. Pass your Client ID as username and Client Secret as password in the Authorization header (Base64-encoded). The body must be form-encoded with grant_type=integration plus user credentials. The returned access_token must be included as a Bearer token in all subsequent API requests.
Authentication
BasicAuth
Request Headers
- Authorization (required)
- Basic Base64(clientId:clientSecret)
- Content-Type (required)
- application/x-www-form-urlencoded
Request Body
Content-Type: application/x-www-form-urlencoded
{
"grant_type": "integration",
"username": "user@example.com",
"password": "your-password",
"accountId": "your-account-id",
"accountSecret": "your-account-secret"
}Responses
HTTP 200 — Token issued successfully
{
"access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJjbGllbnQtaWQiLCJpYXQiOjE3MDAwMDAwMDAsImV4cCI6MTcwMDAwMzYwMH0...",
"token_type": "Bearer",
"expires_in": 3600,
"scope": "api"
}HTTP 401 — Invalid credentials
{
"error": "invalid_client",
"error_description": "Client authentication failed"
}