Login
The endpoint enables users to authenticate and acquire an access token. The access token is necessary to make authorized requests to secured endpoints in the system.
Endpoint Information
- URL: https://account.testinium.com/uaa/oauth/token
- Method: POST
- Header: Basic Authentication (<username> and <password>)
- Content-Type: application/x-www-form-urlencoded
Request Parameters
To obtain an access token, the following form-data parameters are required:
Parameter | Type | Required | Description |
|---|---|---|---|
grant_type | String | Yes | The grant type, typically password. |
username | String | Yes | The user's username. |
password | String | Yes | The user's account password. |
scope | String | No | The scope of access for the token, e.g., api. |
Response
Upon a successful request, the server returns a response containing the access token and additional token information. This token is required for subsequent API calls.
{
"access_token": "your-access-token",
"token_type": "bearer",
"refresh_token": "your-refresh-token",
"expires_in": 3600,
"scope": "openid",
"jti": "unique-token-identifier"
}Response Fields
Field | Type | Description |
|---|---|---|
access_token | String | Token for authenticating API requests. |
token_type | String | Type of token, usually bearer. |
refresh_token | String | Token to refresh the access token upon expiration. |
expires_in | Number | Time in seconds until the access token expires. |
scope | String | The scope of the token's granted access. |
jti | String | Unique identifier for the token. |
Error Codes
The following error codes may be encountered during token generation
HTTP Code | Error Message | Description |
|---|---|---|
400 | INVALID_REQUEST | The request is invalid or missing parameters. |
401 | INVALID_CLIENT | The <username> or <password> is incorrect. |
403 | ACCESS_DENIED | Authentication failed due to incorrect credentials. |
500 | INTERNAL_SERVER_ERROR | An unexpected error occurred on the server. |
Example Request
Below is an example of a curl command to obtain an access token:
curl --location 'https://account.testinium.com/uaa/oauth/token' \
--header 'Authorization: Basic dGVzdGluaXVtU3VpdGVUcnVzdGVkQ2xpZW50OnRlc3Rpbml1bVN1aXRlU2VjcmV0S2V5' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'grant_type=password' \
--data-urlencode 'username= <username>' \
--data-urlencode 'password= <password>'