Skip to content

Access Tokens

Acquire and revoke access tokens.

Operations

Acquire a new access token

Request

This API endpoint accepts a POST request with an auth_token parameter and returns an access_token that grants authorized access to additional resources within the API, with a different expiration time and unique signature.

Security
(auth_token and api-key) or api-key
Bodyapplication/jsonrequired
identityobject(IdentityId)required
clientAssertionstring

Generated using the certificate linked to the Delegated API Client. This feature is available only to customers that have been enabled with delegation functionality.

tokenstring

A short-lived one-time token to be exchanged for an access token. This token is used for identity verification and authorisation purposes.

curl -i -X POST \
  https://sandbox.weavr.io/multi/access_token \
  -H 'Authorization: Bearer <YOUR_JWT_HERE>' \
  -H 'Content-Type: application/json' \
  -H 'api-key: YOUR_API_KEY_HERE' \
  -d '{
    "identity": {
      "type": "CONSUMER",
      "id": "string"
    },
    "clientAssertion": "string",
    "token": "string"
  }'

Responses

Success

Headers
request-refstringrequired

A request identifier. Providing this reference when contacting our support team will help us investigate your query.

Bodyapplication/json
tokenstring
identityobject(IdentityId)

The identity to which the logged-in user belongs to.

credentialsobject(CredentialId)

The unique identifier for the logged-in user.

statusstring

The token status, as follows:

  • STANDARD: it is a standard token.
  • STEPPED_UP: it is a stepped up token.
Enum:"STANDARD""STEPPED_UP"
Response
{
  "token": "string",
  "identity": {
    "type": "CONSUMER",
    "id": "string"
  },
  "credentials": {
    "type": "ROOT",
    "id": "string"
  },
  "status": "STANDARD"
}