Acquire Access Token

curl https://api.thanxsandbox.com/oauth/token \
  -X POST \
  -H "Content-Type: application/json" \
  -d '{
    "grant_type": "authorization_code",
    "client_id": "${client_id}",
    "client_secret": "${client_secret}",
    "code": "${code}",
    "redirect_uri": "https://www.example.com/oauth/callback"
  }'

{
  "token_type": "Bearer",
  "scope": "passwordless",
  "created_at": 1577836800,
  "access_token": "945148251b603ae34561d90acfe4050e67494d6d1e65d4d3d52798407f03c0bd",
  "refresh_token": "c74334301a7c74d21b714c905fd3047177dab56de6a86899e6f6b7f71bab7d55"
}

{
    "error": "invalid_grant",
    "error_description": "The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client."
}

POST

oauth

token

curl https://api.thanxsandbox.com/oauth/token \
  -X POST \
  -H "Content-Type: application/json" \
  -d '{
    "grant_type": "authorization_code",
    "client_id": "${client_id}",
    "client_secret": "${client_secret}",
    "code": "${code}",
    "redirect_uri": "https://www.example.com/oauth/callback"
  }'

{
  "token_type": "Bearer",
  "scope": "passwordless",
  "created_at": 1577836800,
  "access_token": "945148251b603ae34561d90acfe4050e67494d6d1e65d4d3d52798407f03c0bd",
  "refresh_token": "c74334301a7c74d21b714c905fd3047177dab56de6a86899e6f6b7f71bab7d55"
}

{
    "error": "invalid_grant",
    "error_description": "The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client."
}

This same endpoint supports refreshing an access token using the client_id, client_secret, and refresh_token, with grant_type set to refresh_token.

Parameters

string

required

authorization_code is the required value

string

required

OAuth Client ID

string

required

OAuth Client Secret

string

required

The authorization code received from Thanx via redirect or API

string

required

The same redirect_uri should be used as in the request for the authorization code

Response

string

The type of token, usually “Bearer”

string

This will be ‘passwordless’

integer

The number of seconds since the epoch

string

The user’s access token, for use in accessing other API endpoints

string

If needed, a refresh token to get another access token

curl https://api.thanxsandbox.com/oauth/token \
  -X POST \
  -H "Content-Type: application/json" \
  -d '{
    "grant_type": "authorization_code",
    "client_id": "${client_id}",
    "client_secret": "${client_secret}",
    "code": "${code}",
    "redirect_uri": "https://www.example.com/oauth/callback"
  }'

{
  "token_type": "Bearer",
  "scope": "passwordless",
  "created_at": 1577836800,
  "access_token": "945148251b603ae34561d90acfe4050e67494d6d1e65d4d3d52798407f03c0bd",
  "refresh_token": "c74334301a7c74d21b714c905fd3047177dab56de6a86899e6f6b7f71bab7d55"
}

{
    "error": "invalid_grant",
    "error_description": "The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client."
}

Acquire Authorization Code (Cross-Domain)Revoke Access Token

⌘I

Consumer API

Reference

Acquire Access Token

Parameters

Response

​Parameters

​Response

Parameters

Response