---
title: "Authenticate"
method: POST
path: "/oauth/authorize"
tags: ["Authentication"]
---

# Authenticate

`POST /oauth/authorize`

Grant access to the API getting an `OAuth2Token`.

## Response `200`

The `OAuth2Token`.

- OAuth2Token
  - `refresh_token` string — The token used to refresh the session (this operation is not currently supported).
  - `token_type` string — All requests must be always authenticated using the 'Bearer' scheme.
  - `access_token` string — The bearer token to be included in all requests sent to our Business API as part of the `Authorization` header.
  - `expires_in` string — The `access_token` expiration, expressed in seconds. Once the `access_token` is expired your session will be invalidate, you will have to re-authenticate to get a fresh `access_token`.

## Other responses

- `400` — Your request has missing arguments or is malformed.
- `403` — The access token you are using is not granted with the necessary permissions or is expired. Check client scopes and fingerprint requirements.

---

[API](https://skmtc.net/soldo/apis/soldo-business-api-v2-0.md) · [All operations](https://skmtc.net/soldo/apis/soldo-business-api-v2-0/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/soldo/soldo-business-api-v2-0/versions/7be21448a2b3/schema)