Exchange credentials for a token pair

POST

/auth/token

Authentication

Last modified:2026-06-03 19:01:51

Maintainer:Not configured

Exchange your hb_client_id and api_key for an access token and a refresh token. Access tokens expire after 1 hour; refresh tokens expire after 7 days.

Your hb_client_id is your Healthier Business Group portal client ID — the same ID used across all HB services. It is provided by your account manager.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/jsonRequired

Examples

Responses

🟢200

application/json

Token pair issued successfully.

Bodyapplication/json

🟠401Unauthorized

🟠422ValidationError

Request Example

Shell

JavaScript

Java

Swift

curl --location '/auth/token' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "hb_client_id": 1042,
    "api_key": "bls_live_AbCdEfGhIjKlMnOpQrStUvWxYz012345678901234567"
}'

Response Example

200 - Success

{
    "token_type": "Bearer",
    "access_token": "eyJ0eXBlIjoiYWNjZXNzIiwiaWQiOjF9...",
    "refresh_token": "eyJ0eXBlIjoicmVmcmVzaCIsImlkIjoxfQ...",
    "expires_in": 3600,
    "refresh_expires_in": 604800
}

Modified at 2026-06-03 19:01:51

Virtual BLS APIs

Refresh an access token