---
title: "Validate/Retrieve OAuth2 token"
method: POST
path: "/user/authenticate"
tags: ["user"]
---

# Validate/Retrieve OAuth2 token

`POST /user/authenticate`

Validate if the credentials are valid and return the OAuth2 token. It supports User Credentials ( username, password ), Facebook Token ( facebook_token ), or Partner login (partner_auth) grant types. When passing facebook_token or partner_auth then username and password are no longer required.

## Response `200`

Access token information to use for OAuth requests

- object
  - `access_token` string — OAuth Access Token
  - `expires_in` integer — Time in seconds that the OAuth access token expires
  - `token_type` string — OAuth Token Type
  - `scope` string — OAuth scope granted
  - `refresh_token` string — OAuth Refresh Token

## Other responses

- `403` — Username/Email and password doesn't match, or requested with invalid or untrusted partner credentials.

---

[API](https://skmtc.net/zumba/apis/zumba-s-api.md) · [All operations](https://skmtc.net/zumba/apis/zumba-s-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/zumba/zumba-s-api/revisions/90e715bcdf3d/schema)