---
title: "Token"
method: POST
path: "/v2/oauth/token"
tags: ["OAuth2"]
---

# Token

`POST /v2/oauth/token`

Used by the client to obtain an access token by presenting an authorization grant or refresh token

## Response `200`

Success

- AuthAccessTokenResponse — A response containing details about an authorization access token
  - `access_token` string, required — The access token which is used as a bearer token in the Authorization header
  - `access_token_expires_at` string, date-time, required — The date and time when the access token expires and is no longer valid
  - `scopes` string[], required — A list of scopes that this token has access to
  - `users_id` integer, required — The identifier for the user this token is for
  - `apps_id` integer, required — When the token is scoped, the identifier for the app that the token is scoped to
  - `client_id` string, required — The id of the API client this token is issued for

## Other responses

- `400` — Most likely an invalid refresh token

---

[API](https://skmtc.net/sidequestvr/apis/sidequest-api.md) · [All operations](https://skmtc.net/sidequestvr/apis/sidequest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sidequestvr/sidequest-api/revisions/170261dc1673/schema)