# Generate Access Token

Generate an OAuth 2.0 access token to include in the Authorization header of Partner API requests.
**Rate Limiting:** This endpoint is rate-limited to one request per second per client ID. If you exceed this limit, you will receive a `429 Too Many Requests` response.

Endpoint: POST /v1/oauth/token
Version: v.1.0.0
Security: Signature

## Request fields (application/json):

  - `grantType` (string, required)
    The grant_type specifies the type of OAuth 2.0 grant being used for obtaining the access token. Currently only client_credentials is supported.
    Example: client_credentials

  - `clientId` (string, required)
    The client_id is a unique identifier assigned to the client application. This value is used to authenticate the application requesting the access token. Ensure that this is kept secure and not exposed publicly.

  - `clientSecret` (string, required)
    The client_secret is a confidential value known only to the client and the authorization server. It is used in conjunction with the client_id to authenticate the client application. Ensure that this is kept secure and not exposed publicly.

## Response 200 fields (application/json):

  - `accessToken` (string)
    A short-lived JSON Web Token used to authenticate Partner API requests.
    Example: eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9eyJ1dWlkIjoiVEVTVCJ9

  - `tokenType` (string)
    The token type used in the Authorization header.
    Example: Bearer

  - `expiresIn` (integer)
    The access token lifetime in seconds. Cache and reuse the token until it expires, using this value as the cache time-to-live.
    Example: 7200

## Response 400 fields (application/json):

  - `code` (string)
    OAuth error code.
    Example: INVALID_REQUEST

  - `message` (string)
    Human-readable explanation of the OAuth error.
    Example: Invalid client credentials

## Response 429 fields (application/json):

  - `code` (string)
    Machine-readable error code.
    Example: INTERNAL_ERROR

  - `message` (string)
    Human-readable error message.
    Example: Internal Server Error

## Response 500 fields (application/json):

  - `code` (string)
    Machine-readable error code.
    Example: INTERNAL_ERROR

  - `message` (string)
    Human-readable error message.
    Example: Internal Server Error