Legacy authentication — being sunset. Obtain an access token using the OAuth2 password grant. Send your sandbox x-api-key plus username/password. The token is an HS256 JWT and a refresh_token is returned. New integrations should use the OAuth2 client_credentials flow described in the Authentication guide. Treat the returned access_token as an opaque Bearer token.
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
Obtain an OAuth2 access token using password grant type.
NOTE:
- Use default params.
- Use following header x-api-key: Zt9tXPIgz17uxEU6gkZPWa3ZAFhZOqm04oEDHC1f
BAD REQUEST - The request was bad, often due to a missing required parameter
NOT AUTHORIZED - Authentication error; this token is not allowed access to the API
FORBIDDEN
NOT FOUND
UNPROCESSABLE ENTITY - Request could not be processed; typically a validation error
TOO MANY REQUESTS - Request was rate limited (1000 calls/min default); please retry
SERVER ERROR - Internal Server Error