Skip to main content
POST
Token

Body

application/json

The three credentials are bounded because this route is pre-authentication and client_id becomes a key of the throttle's dictionary, held for the whole 15-minute window: without a bound, an anonymous caller decides how many bytes each of the _MAX_TRACKED entries weighs. The widths are the columns' (CLIENT_ID is a VARCHAR(64)), so nothing that could match is refused.

grant_type
enum<string>
required
Available options:
client_credentials,
refresh_token
client_id
string | null
Maximum string length: 64
client_secret
string | null
Maximum string length: 200
refresh_token
string | null
Maximum string length: 200

Response

Successful Response

access_token
string
required
expires_in
integer
required
refresh_token
string
required
token_type
string
default:bearer