---
title: "Exchange credentials for a JWT"
method: POST
path: "/v1/auth/token"
tags: ["Authentication"]
---

# Exchange credentials for a JWT

`POST /v1/auth/token`

Issues a signed HS256 JWT access token valid for the configured TTL (default 1 hour).
Accepts either `application/x-www-form-urlencoded` query parameters or a JSON body
with `client_id` and `client_secret` fields.

**Rate limited to 10 requests per minute per IP.**

## Query parameters

- `client_id` string
- `client_secret` string

## Response `200`

Token issued

## Other responses

- `401` — Invalid credentials
- `429` — Rate limit exceeded

---

[API](https://skmtc.net/reflexpay/apis/idaas-identity-as-a-service-api.md) · [All operations](https://skmtc.net/reflexpay/apis/idaas-identity-as-a-service-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/reflexpay/idaas-identity-as-a-service-api/revisions/db1f954badfb/schema)