Skip to content
rigid.fi

OAuth2 client_credentials token endpoint

POST/v1/oauth/token

Authenticates with client credentials — no bearer token required.

Exchanges a client_id + client_secret for a short-lived access token (30 minutes). Accepts application/x-www-form-urlencoded (primary) or JSON body, and HTTP Basic credentials via Authorization header.

Request body

grant_type"client_credentials"required
client_idstring
client_secretstring

Example

curl -X POST https://api.rigid.fi/v1/oauth/token   -u "$CLIENT_ID:$CLIENT_SECRET"   -d 'grant_type=client_credentials'

Responses

200

Token issued.

access_tokenstringrequired
token_type"Bearer"required
expires_inintegerrequired
400

invalid_request or unsupported_grant_type.

errorstringrequired
401

invalid_client — unknown client_id, wrong secret, revoked, or expired-previous.

errorstringrequired
429

Rate limit exceeded for this client.

errorstringrequired