---
title: "Request for access token"
method: POST
path: "/auth/oauth/access-token"
tags: ["auth-oauth"]
---

# Request for access token

`POST /auth/oauth/access-token`

Request for access token by presenting previously acquired request token. Requires x-signature and x-timestamp header

## Request body

- AccessTokenRequest
  - `requestToken` string, required — Request token acquired when user granted access
  - `requestId` string, required — Unique Request ID originally generated by requesting app but in plain text (not hashed)
  - `serviceIdentifier` string, required — Service ID or API key of requesting app

## Response `200`

Success

- AccessTokenResponse
  - `userId` string, required — Onboard unique User ID
  - `accessToken` Token, required
    - `token` string, required — Token string (Request, Access, Refresh)
    - `expiry` string, date-time, required — Timestamp field.
  - `refreshToken` Token, required
    - `token` string, required — Token string (Request, Access, Refresh)
    - `expiry` string, date-time, required — Timestamp field.

## Other responses

- `400` — Bad request
- `401` — Unauthorized request
- `403` — Forbidden request
- `500` — Server error

---

[API](https://skmtc.net/nestechops/apis/onboard-external-api-gateway.md) · [All operations](https://skmtc.net/nestechops/apis/onboard-external-api-gateway/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/nestechops/onboard-external-api-gateway/versions/29661adc1ffc/schema)