Authentication Token

POST/authentication/oauth2/access_token

__Authentication__ All transactions are authenticated using a Bearer token generated through the OAuth 2.0 protocol. To obtain a token, clients must send a request to the authentication endpoint using their `client_id` and `client_secret` (click <a href='https://docs.globalgetnet.com/es/articles/api-keys'>here</a> to see how to generate your credentials). To authenticate this request, you must pass the Base64-encoded string of `client_id:client_secret` in the `Authorization` header. The generated access token must be included in the `Authorization` header of each API request, ensuring secure and controlled access to the API. __Usage__ Once the token is obtained, include it in the Authorization header of your API requests as follows: `Authorization: Bearer {access_token}` __Token Expiration & Renewal__ - The token is valid for the duration specified in `expires_in` (usually 3599 seconds or ~1 hour). - When the token expires, you must request a new one using the same authentication process. v20250823.0859

Header Parameters

Authorizationstringrequired

The Basic Auth header containing client_id:client_secret encoded in Base64.

Body application/x-www-form-urlencoded

grant_type"client_credentials"required

The OAuth 2.0 grant type.

Response

Access token generated successfully.

access_tokenstring

The Bearer Token to be used in the Authorization header.

scopestring

The granted scope(s) for the token.

token_typestring

Indicates the token type, which is always "Bearer".

expires_ininteger<int32>

The token's lifetime in seconds (e.g., 3599).

Invalid credentials

error_descriptionstring

errorstring

curl -X POST "https://api.pre.globalgetnet.com/authentication/oauth2/access_token" \ -H "Content-Type: application/x-www-form-urlencoded" \ -H "Authorization: <Authorization>" \ -d '{ "grant_type": "client_credentials" }'

const response = await fetch(`https://api.pre.globalgetnet.com/authentication/oauth2/access_token`, { method: 'POST', headers: { 'Content-Type': 'application/x-www-form-urlencoded' }, body: JSON.stringify({ "grant_type": "client_credentials" }) }); const data = await response.json();

import requests response = requests.request( "POST", "https://api.pre.globalgetnet.com/authentication/oauth2/access_token", json={ "grant_type": "client_credentials" }, ) data = response.json()

<?php $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "https://api.pre.globalgetnet.com/authentication/oauth2/access_token"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST"); curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/x-www-form-urlencoded"]); curl_setopt($ch, CURLOPT_POSTFIELDS, '{ "grant_type": "client_credentials" }'); $response = curl_exec($ch); curl_close($ch);

package main import ( "fmt" "io" "net/http" "strings" ) func main() { req, _ := http.NewRequest("POST", "https://api.pre.globalgetnet.com/authentication/oauth2/access_token", strings.NewReader(`{ "grant_type": "client_credentials" }`)) req.Header.Set("Content-Type", "application/x-www-form-urlencoded") resp, err := http.DefaultClient.Do(req) if err != nil { panic(err) } defer resp.Body.Close() data, _ := io.ReadAll(resp.Body) fmt.Println(string(data)) }

HttpClient client = HttpClient.newHttpClient(); HttpRequest request = HttpRequest.newBuilder() .uri(URI.create("https://api.pre.globalgetnet.com/authentication/oauth2/access_token")) .header("Content-Type", "application/x-www-form-urlencoded") .method("POST", HttpRequest.BodyPublishers.ofString("{\n \"grant_type\": \"client_credentials\"\n}")) .build(); HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString()); System.out.println(response.body());

require "net/http" require "uri" uri = URI("https://api.pre.globalgetnet.com/authentication/oauth2/access_token") http = Net::HTTP.new(uri.host, uri.port) http.use_ssl = uri.scheme == "https" request = Net::HTTP::Post.new(uri) request["Content-Type"] = "application/x-www-form-urlencoded" request.body = "{\n \"grant_type\": \"client_credentials\"\n}" response = http.request(request) puts response.body

{ "access_token": "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.BxMYBiGHWU8r2pzD_GFFjXI3EduBrJdkxSo6aF-726_s3VWa0UH2QDQy5aVsrbF8spS0M7l6T6tsNVk-vt5jkAtIpUv1exNKk4VbPk_TXn9fVHJKEqZh_6xPHNKtmaF85uOpS2Rgnv9rulKHHWXLG3GTElqeiXBX0z5fSAWiCuFRrgIWUYib_ifXwMpu8r-J9c088ltdQrwvltjs5UskTycSR62-UPIQV2a1qXG30rddTA5eHm5EAGvpDNc9LqyrgKvG4SEkf0l0aLv-fpKJuqQk6CKGtEV6DQ92bK5OwJdTY07WZBsVtLPf_fgl4LYa5RWz-9qNE0ZUzQIcH-O4-A", "scope": "digital-platform:gateway-api", "token_type": "Bearer", "expires_in": 3599 }