Sign in
latestOpenAPI 3.1.02026-08-194237902.5 MB

563848e0ecc0

Auth

Obtain an access token via OAuth2 client credentials grant

Performs the OAuth2 client credentials grant on behalf of a machine client, exchanging a clientId and clientSecret for an access token scoped to this service's configured Auth0 audience. Use this endpoint for automated, non-interactive service accounts and background jobs that do not act on behalf of a human user; for human user login, use POST /auth/login instead. No prior authentication is required to call this endpoint. Both clientId and clientSecret are required and must be non-blank — the server returns 400 if either is missing or empty; this endpoint never falls back to the service's own configured Auth0 credentials, so a caller cannot obtain a token without supplying valid credentials of their own. On success, returns a JSON object containing accessToken, expiresIn (lifetime in seconds), and tokenType (always Bearer). Pass the token as Authorization: Bearer <accessToken> on subsequent requests.

post/auth/client-credentials

Headers

tenant-idstring

Not required and not used by this endpoint. This operation is marked tenant-agnostic, so the tenant-id presence check is skipped for it and the header value, if supplied, is not read by the handler.

Request body

clientIdstring required

Auth0 client ID (required)

clientSecretstring required

Auth0 client secret (required)

Example request

{
  "clientId": "your-client-id",
  "clientSecret": "your-client-secret"
}

Response

A JSON object containing a bearer access token (accessToken), its lifetime in seconds (expiresIn), and the token type (tokenType, always Bearer).

accessTokenstring required

JWT access token

expiresIninteger required

Token expiration time in seconds

tokenTypestring required

Token type

Example response

{
  "accessToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expiresIn": 86400,
  "tokenType": "Bearer"
}