Grant Type Password will return two important items.
access_token - Store the returned access token in your application to authenticate the other endpoint requests. The access token expires after 3600 seconds.
refresh_token - Password or Code grant types are limited to 5 authentication attempts per hour. Using the refresh token workflow avoids unneeded access token requests and prevents your application from reaching this limit. The refresh token expires when a new token request is made with the same credentials via any of the Grant Type calls or after one month.
| Parameter | Parameter Type | Data Type | Description |
|---|---|---|---|
| grant_type | x-www-form-urlencoded | string | Must be set to 'password' |
| client_id | x-www-form-urlencoded | string | The Client ID found in your Act-On account. |
| client_secret | x-www-form-urlencoded | string | The Client Secret found in your Act-On account. |
| username | x-www-form-urlencoded | string | The username for the Act-On account you wish to authenticate to |
| password | x-www-form-urlencoded | string | The password that pairs with that username |
Example
curl --location 'https://api.actonsoftware.com/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'grant_type=password' \
--data-urlencode '[email protected]' \
--data-urlencode 'password=example' \
--data-urlencode 'client_id=jdaf823jsjsfd731jn' \
--data-urlencode 'client_secret=lsdfljsf873r92nlwhfy7eihwifhji74'
Response
{
"access_token":"12345678-9abc-defg-hijk-lmnopqrs",
"refresh_token":"12345678-9abc-defg-hijk-lmnopqrs",
"scope":"offline-access",
"token_type":"Bearer",
"expires_in": 3600
}