> For the complete documentation index, see [llms.txt](https://valify.gitbook.io/documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://valify.gitbook.io/documentation/apis/oauth-token.md).

# OAuth Token

***

## OAuth Token Usage

All Valify Service APIs use **OAuth 2.0** as the authentication mechanism.

* An **access token** is valid for **10 minutes** from the time it is generated.
* Each token can be used for up to **3 API calls** within this 10-minute window.
* A new token is only required if **either**:
  * The token has been used **3 times**, **or**
  * The **10-minute validity period** has expired.

> ⚠️ Avoid requesting a new token for every API call. Instead, reuse the same token until it reaches **3 uses** or **expires after 10 minutes.**

## OAuth Token

<mark style="color:green;">`POST`</mark> `https://valifystage.com/api/o/token/`

#### Headers

| Name         | Type   | Description                       |
| ------------ | ------ | --------------------------------- |
| Content-Type | string | application/x-www-form-urlencoded |

#### Request Body

| Name           | Type   | Description |
| -------------- | ------ | ----------- |
| username       | string |             |
| password       | string |             |
| client\_id     | string |             |
| client\_secret | string |             |
| grant\_type    | string | password    |

{% tabs %}
{% tab title="✅ 200 Success" %}

```python
{
    'access_token': '********************************', 
    'expires_in': 600, #10 Minutes
    'token_type': 'Bearer', 
    'scope': '<given_score_permission>', 
    'refresh_token': '********************************'
}
```

{% endtab %}
{% endtabs %}

{% tabs %}
{% tab title="🐍Python 3" %}

```python
import requests

r = requests.post("https://valifystage.com/api/o/token/",
        data={
            'username': '<username>', # Place your data here
            'password': '<password>', 
            'client_id': '<client id>',  
            'client_secret': '<client secret>', 
            'grant_type': 'password'
        }
    )

print(r.json())
```

{% endtab %}
{% endtabs %}

## <mark style="color:blue;">Postman Package</mark>

{% file src="/files/-MPEdxnwXs7FHrE-l1pe" %}
ACCESS TOKEN
{% endfile %}