Skip to main content
POST /v1/authorizations/token Obtains access tokens for server-to-server API calls using the OAuth 2.0 Client Credentials grant type.

Required Headers

string
required
Basic authentication in the format: Basic Base64(client_id:client_secret)
string
required
SHA256withRSA algorithm signature: algorithm=SHA256withRSA, keyVersion=1, signature=****
string
required
Identifier provided by A+ (e.g., 2022091495540562874792)
string
required
RFC3339 formatted timestamp accurate to seconds
string
application/json; charset=UTF-8

Request Parameters

string
required
Fixed value: client_credentials
string
Permission scope. Use openid for Mini Program scenarios.

Response Parameters

object
required
Standard result object with resultCode, resultStatus, resultMessage
string
13-digit millisecond timestamp of the response.
string
Bearer token for subsequent API calls.
string
Always Bearer.
number
Token validity period in seconds.
string
Granted permission scopes.

Result Codes