---
title: "Obtain OAuth2 Token (client_credentials)"
method: POST
path: "/auth/realms/ema-fhir/protocol/openid-connect/token"
tags: ["Authentication"]
---

# Obtain OAuth2 Token (client_credentials)

`POST /auth/realms/ema-fhir/protocol/openid-connect/token`

Obtain an access token using the OAuth2 `client_credentials` grant. Send your `client_id` and `client_secret`. Returns an RS256-signed JWT; the `scope` claim is a space-separated list of ACLs and no refresh token is returned.

## Response `200`

Access token response

- object
  - `access_token` string — RS256-signed JWT
  - `expires_in` integer
  - `refresh_expires_in` integer
  - `token_type` string
  - `not-before-policy` integer
  - `scope` string — Space-separated list of ACL scopes

---

[API](https://skmtc.net/modmed/apis/ema-proprietary-api-authentication.md) · [All operations](https://skmtc.net/modmed/apis/ema-proprietary-api-authentication/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/modmed/ema-proprietary-api-authentication/revisions/2c8b6a756f84/schema)