Sign in

v1

latestOpenAPI 3.0.32026-07-2650226215.9 KB
Auth

Get bearer token

Exchanges an OMS API key + secret for a bearer token valid for 60 minutes. The token is signed by the OMS issuer and must be presented as Authorization Bearer <token> on every other endpoint.

post/auth/token

Request body

apiKeystring required

Secret API key identifier. Prefix encodes (mode, env): sk_live_… / sk_sdbx_… on prod; non-prod envs add an env infix (sk_dev_sdbx_…, sk_stg_live_…, …). The matching apiSecret is shown once at key creation and stored only as an HMAC hash.

apiSecretstring required

Opaque secret revealed once at key creation; not a typeid.

Example request

{
  "apiKey": "sk_live_abc123...",
  "apiSecret": "opaque-bearer-secret..."
}

Response

Token issued

accessTokenstring required
tokenType'bearer' required
expiresIninteger required
expiresAtstring date-time required

Example response

{
  "accessToken": "eyJhbGciOiJSUzI1NiIs...",
  "expiresIn": 3600
}
All 50 operations