---
title: "Authorize a User"
method: POST
path: "/v1/oauth/token"
tags: ["Authorization"]
---

# Authorize a User

`POST /v1/oauth/token`

> 📘
>
> You can place your application's `client_id` into the `username` field, and your `client_secret` into the `password` form field of the Authentication section of this documentation 👉.

Use this endpoint to both initially Authorize a User, and also to Refresh Authorization for a user.

In the **Form Data** below, **Option 1** is for the initial action to Authorize a User.  **Option 2** is for the action of using the `refresh_token` to generate a new `access_token`.

## Response `200`

Authorization Responses

- OauthSuccessResponse
  - `access_token` string, password — The access token for the User (used for any Bearer Auth resources)
  - `expires_in` integer — Seconds from the time of authorization that the `access_token` will expire
  - `refresh_token` string, password — The token that can be used to refresh authorization and retrieve a new `access_token`
  - `token_type` string — The type of token returned

## Other responses

- `400` — Authorization Responses

---

[API](https://skmtc.net/astra/apis/astra-developer-api.md) · [All operations](https://skmtc.net/astra/apis/astra-developer-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/astra/astra-developer-api/revisions/09f0430e5d33/schema)