---
title: "Client Credential Flow (2-legged OAuth)"
method: POST
path: "/v1/oauth/accessToken"
tags: ["Authorization"]
deprecated: true
---

# Client Credential Flow (2-legged OAuth)

`POST /v1/oauth/accessToken`

> **Deprecated.**

Each application (workflow) is assigned a unique Client ID and Client Secret.

 A successful access token request returns a JSON object containing the bearer token and the number of seconds until the token expires. Access tokens are issued with a 60 minute lifespan. You can request a new token once your current token expires.

## Query parameters

- `clientId` string, required
- `clientSecret` string, required

## Response `200`

OK

- CognitoTokenDTO
  - `accessToken` string
  - `expires` integer

---

[API](https://skmtc.net/trulioo/apis/trulioo-platform-api.md) · [All operations](https://skmtc.net/trulioo/apis/trulioo-platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/trulioo/trulioo-platform-api/versions/a825565ee177/schema)