Access Token B2B
This endpoint issues the access token used by every partner request.
Service Info
| Item | Value |
|---|
HTTP Method | POST |
Service Code | 01 |
Base URL | URL provided at activation |
Path | /openapi/v1.0/access-token/b2b |
Header
| Header | Type | Required | Description |
|---|
Content-Type | String | Yes | application/json |
X-CLIENT-KEY | String | Yes | Partner client_id |
X-TIMESTAMP | String | Yes | yyyy-MM-ddTHH:mm:ss+07:00 |
X-SIGNATURE | String | Yes | RSA-SHA256(clientId|X-TIMESTAMP) |
Body
| Parameter | Type | Required | Description |
|---|
grantType | String | Yes | Value: client_credentials |
Request Sample
{
"grantType": "client_credentials"
}
Response Structure
| Parameter | Type | Description |
|---|
responseCode | String | Response code |
responseMessage | String | Response message |
accessToken | String | Token for every partner request |
tokenType | String | Bearer |
expiresIn | String | 900 seconds |
additionalInfo | Object | Additional information, currently empty |
Response Sample
{
"responseCode": "2000100",
"responseMessage": "Successful",
"accessToken": "<accessToken>",
"tokenType": "Bearer",
"expiresIn": "900",
"additionalInfo": {}
}
Response Codes
| Response Code | Message | Description |
|---|
2000100 | Successful | Token issued |
4000100 | Bad Request | Invalid request body |
4000101 | Invalid Field Format | Invalid field format |
4000102 | Invalid Mandatory Field | Missing required header |
4010100 | Unauthorized | Invalid signature or unknown client |
4030100 | Forbidden | Access denied |
4290100 | Too Many Requests | Request limit exceeded |
5000101 | Internal Server Error | Server error |
Signature generation is documented in Signature Generation.