Exchange credentials for a token pair

POST

/auth/token

Authentication

Last modified:2026-06-05 10:12:55

Maintainer:Not configured

Authenticates using your hb_client_id and an active API key. Returns an access/refresh token pair. Access tokens expire after 3600 seconds (1 hour).

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/jsonRequired

Examples

Responses

🟢200

application/json

Token pair issued.

Bodyapplication/json

🟠401Unauthorized

Request Example

Shell

JavaScript

Java

Swift

curl --location '/auth/token' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "hb_client_id": 4021,
    "api_key": "tdta_live_sk_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}'

Response Example

200 - Success

{
    "token_type": "Bearer",
    "access_token": "eyJ0eXAiOiJKV1Qi...",
    "refresh_token": "def50200abc...",
    "expires_in": 3600,
    "refresh_expires_in": 604800
}

Modified at 2026-06-05 10:12:55

Practical Training APIs

Refresh an access token