Authentication

Get Access Token

Authenticate using OAuth2 client credentials flow and receive a Bearer token for API access. Tokens are valid for 24 hours.

post/auth/token

Request body

application/x-www-form-urlencoded · required

grant_typestringrequired

OAuth2 grant type (must be "client_credentials")

Optionsclient_credentials

client_idstringrequired

Your unique 6-digit client identifier

client_secretstringrequired

Your client authentication secret

Responses

200Authentication successfulapplication/json

Show response body

access_tokenstringrequired

The JWT access token to use for API requests

token_typestringrequired

The type of token (always "Bearer")

OptionsBearer

expires_inintegerrequired

Token validity period in seconds (86400 = 24 hours)

400Bad Request - Missing or invalid parametersapplication/problem+json

Show response body

typestring · urirequired

URI reference to error documentation

titlestringrequired

Short, consistent error summary

statusintegerrequired

HTTP status code

detailstringrequired

Human-readable explanation specific to this occurrence

401Unauthorized - Invalid credentialsapplication/problem+json

Show response body

typestring · urirequired

URI reference to error documentation

titlestringrequired

Short, consistent error summary

statusintegerrequired

HTTP status code

detailstringrequired

Human-readable explanation specific to this occurrence

429Rate limit exceeded

Request

curl https://connect.firsty.app/api/v3/auth/token \
  --request POST \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data-urlencode 'grant_type=client_credentials' \
  --data-urlencode 'client_id=123456' \
  --data-urlencode 'client_secret=sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'

fetch('https://connect.firsty.app/api/v3/auth/token', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/x-www-form-urlencoded'
  },
  body: new URLSearchParams({
    grant_type: 'client_credentials',
    client_id: '123456',
    client_secret: 'sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
  })
})

requests.post(
    "https://connect.firsty.app/api/v3/auth/token",
    headers={
      "Content-Type": "application/x-www-form-urlencoded"
    },
    data={
      "grant_type": "client_credentials",
      "client_id": "123456",
      "client_secret": "sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
    }
)

$client = new GuzzleHttp\Client();

$response = $client->request('POST', 'https://connect.firsty.app/api/v3/auth/token', [
  'headers' => [
    'Content-Type' => 'application/x-www-form-urlencoded'
  ],
  'form_params' => [
    'grant_type' => 'client_credentials',
    'client_id' => '123456',
    'client_secret' => 'sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
  ]
]);

package main

import (
	"fmt"
	"io"
	"net/http"
	neturl "net/url"
	"strings"
)

func main() {
	requestUrl := "https://connect.firsty.app/api/v3/auth/token"

	postData := neturl.Values{}
	postData.Set("grant_type", "client_credentials")
	postData.Set("client_id", "123456")
	postData.Set("client_secret", "sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx")

	req, _ := http.NewRequest("POST", requestUrl, strings.NewReader(postData.Encode()))

	req.Header.Add("Content-Type", "application/x-www-form-urlencoded")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}

curl https://connect.test.firsty.app/api/v3/auth/token \
  --request POST \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data-urlencode 'grant_type=client_credentials' \
  --data-urlencode 'client_id=123456' \
  --data-urlencode 'client_secret=sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'

fetch('https://connect.test.firsty.app/api/v3/auth/token', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/x-www-form-urlencoded'
  },
  body: new URLSearchParams({
    grant_type: 'client_credentials',
    client_id: '123456',
    client_secret: 'sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
  })
})

requests.post(
    "https://connect.test.firsty.app/api/v3/auth/token",
    headers={
      "Content-Type": "application/x-www-form-urlencoded"
    },
    data={
      "grant_type": "client_credentials",
      "client_id": "123456",
      "client_secret": "sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
    }
)

$client = new GuzzleHttp\Client();

$response = $client->request('POST', 'https://connect.test.firsty.app/api/v3/auth/token', [
  'headers' => [
    'Content-Type' => 'application/x-www-form-urlencoded'
  ],
  'form_params' => [
    'grant_type' => 'client_credentials',
    'client_id' => '123456',
    'client_secret' => 'sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
  ]
]);

package main

import (
	"fmt"
	"io"
	"net/http"
	neturl "net/url"
	"strings"
)

func main() {
	requestUrl := "https://connect.test.firsty.app/api/v3/auth/token"

	postData := neturl.Values{}
	postData.Set("grant_type", "client_credentials")
	postData.Set("client_id", "123456")
	postData.Set("client_secret", "sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx")

	req, _ := http.NewRequest("POST", requestUrl, strings.NewReader(postData.Encode()))

	req.Header.Add("Content-Type", "application/x-www-form-urlencoded")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}

Response

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjbGllbnRfaWQiOiI1NTBlODQwMC1lMjliLTQxZDQtYTcxNi00NDY2NTU0NDAwMDAiLCJpYXQiOjE3MDYxNDA4MDAsImV4cCI6MTcwNjIyNzIwMH0.abc123",
  "token_type": "Bearer",
  "expires_in": 86400
}

{
  "type": "https://developers.firsty.app/errors/bad-request",
  "title": "Bad request",
  "status": 400,
  "detail": "Missing required parameter: client_id"
}

{
  "type": "https://developers.firsty.app/errors/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "detail": "Invalid client credentials"
}

{
  "type": "https://developers.firsty.app/errors/rate-limit-exceeded",
  "title": "Rate limit exceeded",
  "status": 429,
  "detail": "Too many requests. Please retry later."
}