curl --request POST \
--url https://auth.phonovation.com/token \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data client_id=messaging-api \
--data grant_type=password \
--data username=user@example.com \
--data password=your-password{
"access_token": "eyJhbGciOi...",
"expires_in": 300,
"refresh_expires_in": 1800,
"refresh_token": "eyJhbGciOi...",
"token_type": "Bearer",
"not-before-policy": 0,
"session_state": "11111111-2222-3333-4444-555555555555",
"scope": "openid"
}{
"error": "invalid_grant",
"error_description": "Invalid user credentials"
}{
"error": "<string>",
"error_description": "<string>"
}Obtain or refresh an OAuth access token
Obtain OAuth tokens for integrations that require an OAuth lifecycle.
curl --request POST \
--url https://auth.phonovation.com/token \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data client_id=messaging-api \
--data grant_type=password \
--data username=user@example.com \
--data password=your-password{
"access_token": "eyJhbGciOi...",
"expires_in": 300,
"refresh_expires_in": 1800,
"refresh_token": "eyJhbGciOi...",
"token_type": "Bearer",
"not-before-policy": 0,
"session_state": "11111111-2222-3333-4444-555555555555",
"scope": "openid"
}{
"error": "invalid_grant",
"error_description": "Invalid user credentials"
}{
"error": "<string>",
"error_description": "<string>"
}Body
OAuth credentials or a refresh token, encoded as form fields.
- Password Grant Request
- Refresh Token Grant Request
OAuth compatibility request that exchanges Phonovation user credentials for an access token and refresh token. Most integrations should use a UI-generated PAT instead.
OAuth client identifier. Use messaging-api.
messaging-api Use password to exchange user credentials for OAuth tokens.
password Your Phonovation username.
Your Phonovation password.
Response
OAuth tokens issued successfully.
OAuth tokens and their lifetimes.
OAuth access token to reuse in the Authorization header until it is close to expiry.
Access-token lifetime in seconds.
Authorization scheme for the access token.
"Bearer"
Refresh-token lifetime in seconds, when returned.
Token used to obtain a new access token without resending user credentials.
OpenID Connect ID token, when returned for the requested scope or flow.
Authentication not-before policy value, when returned.
Authentication session identifier, when returned.
Space-separated OAuth scopes granted to the token, when returned.