post
https://api.somossimpay.com.br/v2/finance/auth-token/
Generate OAuth 2.0 access token using client credentials. The access token is valid for 60 minutes.
Recent Requests
Log in to see full request history
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
Loading…
Auth Token
POST /v2/finance/auth-token/
The access token is valid for 60 minutes
Body Details
{
"client_id": "xxxxxxxxxxxxxxxxxxxxxxxxxx",
"client_secret": "xxxxxxxxxxxxxxxxxxxxxxx"
}| Parameter | Description | Required |
|---|---|---|
| client_id | Public identifier for your application (used during the OAuth 2.0 authorization request) | Yes |
| client_secret | Confidential secret for authentication. Never expose this in client-side code or public repos | Yes |
Response (200 OK)
{
"access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwiZXhwIjoxNzEzMzAwOTMxLCJpYXQiOjE3MTMyOTczMzEsImp0aSI6Ijc2ZWI4ZTE5ZjM4YjQ4NmZiODdmNzNjNTdkMWVmNDJhIiwidXNlcl9pZCI6MjQ2fQ.5zekMa7CUj9p-MvNHns5ke4ZPhYV3Y1CLOsYL7hDUUo",
"token_type": "Bearer"
}| Field | Type | Description |
|---|---|---|
| access_token | String | JWT access token to be used in the Authorization header of subsequent API requests |
| token_type | String | Always "Bearer". Use as: Authorization: Bearer {access_token} |
Error Responses
400 Bad Request
{
"error": "invalid_client",
"error_description": "Invalid client credentials"
}401 Unauthorized
{
"detail": "Account is disabled"
}Related Documentation
- HMAC Documentation - Implement HMAC-SHA512 signatures for secure requests
- Authentication API Overview - Complete authentication guide
Bad request - Invalid credentials
Unauthorized - Account disabled