---
title: "Generate A Live Session Token"
method: POST
path: "/oauth/live_session_token"
tags: ["tradingOAuth10A"]
---

# Generate A Live Session Token

`POST /oauth/live_session_token`

Generate a Live Session Token shared secret and gain access to Web API.

## Headers

- `Authorization` string

## Response `200`

Success response with Diffie-Hellman challenge and Signature value

- TradingOAuth10aReqLiveSessionTokenResponse200
  - `diffie_hellman_challenge` string — Diffie-Hellman challenge value used to compute live session token locally by client.
  - `live_session_token_signature` string — Signature value used to validate successful client-side computation of live session token.
  - `live_session_token_expiration` integer — Unix timestamp in milliseconds of time of live session token computation by IB. Live session tokens are valid for 24 hours from this time.

## Other responses

- `401` — Missing, invalid, or unparseable Authorization token.
- `503` — service is unavailable. For example if request takes more than 10s due to some internal service unavailability, request aborted and this status returned

---

[API](https://skmtc.net/interactivebrokers/apis/api-reference.md) · [All operations](https://skmtc.net/interactivebrokers/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/interactivebrokers/api-reference/revisions/67f9f562c2c6/schema)