---
title: "Authorize and generate access tokens"
method: POST
path: "/authorize/customer"
tags: ["Authorization"]
---

# Authorize and generate access tokens

`POST /authorize/customer`

Required initial endpoint before starting the document verification process. It generates the access tokens to be used in subsequent endpoints. Access token expire in 60 minutes.

## Headers

- `Accept-Version` string, required

## Request body

- object
  - `consent` boolean, required — Provided consent will create a historical record with timestamp
  - `webhook` string, uri — Callback URL for transaction status updates. See [Webhooks](https://docs.verification.trulioo.com/sdk/webhook/index.html)

## Response `200`

OK

- AuthorizationResponse
  - `accessToken` string — Short lived token in the JWT format with 60 minutes expiration period.
  - `refreshToken` string
  - `tokenType` string — The type of the token based on refresh token.
  - `expiresIn` number — TTL in milliseconds based on the refresh token

## Other responses

- `401` — Unauthorized `default`: Jwt is expired
- `500` — Internal Server Error

---

[API](https://skmtc.net/trulioo/apis/trulioo-platform-api.md) · [All operations](https://skmtc.net/trulioo/apis/trulioo-platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/trulioo/trulioo-platform-api/versions/a825565ee177/schema)