At Authenticx, we use the OAuth 2.0 protocol to authenticate incoming requests to our API. This means that you will first need to get an access token before you can start requesting, creating, or updating resources via our API. To get your access token you will need to have your client id as well as your client secret which should have been provided to you during on-boarding. # Command Line ## Curl Command ### Production: ```shell shell curl -d "client_id=&client_secret=&grant_type=client_credentials&scope=acxapi" \ -X POST https://api.beauthenticx.com/connect/token ``` *** ### Staging: ```shell curl -d "client_id=&client_secret=&grant_type=client_credentials&scope=acxapi" \ -X POST https://api.authcx.com/connect/token ``` ## Expected Response ```json { "access_token": "******************************************", "token_type": "Bearer", "expires_in": 3600, "scope": "acxapi" } ``` > 🚧 Access Token Expiry > > Access tokens expire after 1 hour so you will need to refresh them often! We also accept the client id and client secret through the `Authorization` header with the `Basic` auth scheme. If you are unfamiliar with this method we will explain. First, you should encode the following string `:` using base64 encoding. Then set the `Authorization` header to `Basic `. You will still need to provide the grant type and scope in the request body with content-type `application/x-www-form-urlencoded`. # Authenticx API Below are recipes in a few different languages that go over how you can generate an access token via the Authenticx API: