Skip to main content

​
Overview

This is the first step for any API call. Use your apiClientId and apiClientSecret (Basic auth) to get a short-lived accessToken. That token is then sent as Authorization: Bearer ... to other endpoints.

​
Prerequisites

  • apiClientId and apiClientSecret
  • Base URL: {{ACCOUNT_URL}} (staging or production)

​
Request

curl -X POST "{{ACCOUNT_URL}}/v1/ext/jwt/generate-token" \
  -u "$API_CLIENT_ID:$API_CLIENT_SECRET" \
  -H "Content-Type: application/json" \
  -d '{}'

​
Response (200)

{
  "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
}

​
Usage Tips

  • Store accessToken securely and reuse until it expires.
  • Do not expose client credentials in client-side code.
  • Rotate credentials periodically.