Obtain OAuth2 Token (Legacy — password grant)

Legacy authentication — being sunset. Obtain an access token using the OAuth2 password grant. Send your sandbox x-api-key plus username/password. The token is an HS256 JWT and a refresh_token is returned. New integrations should use the OAuth2 client_credentials flow described in the Authentication guide. Treat the returned access_token as an opaque Bearer token.