Auth

Get Access Token

Obtain a Bearer access token using the OAuth 2.0 Client Credentials grant (RFC 6749 §4.4).

Setup

1. Get your client_id from OmaxTelecom Console
2. Get your client_secret from OmaxTelecom Console

Request

Code
 
POST https://api.omaxtelecom.com/auth/token
Content-Type: application/x-www-form-urlencoded

grant_type=client_credentials&client_id={client_id}&client_secret={client_secret}

Response (200 OK)

Code
 
{
  "access_token": "eyJhbGciOiJSUzI1NiIs...",
  "expires_in": 300,
  "token_type": "Bearer",
  "scope": "openid"
}

Field	Type	Description
access_token	string	Bearer token — include in Authorization header for all API calls
expires_in	int	Token lifetime in seconds
token_type	string	Always Bearer
scope	string	Granted scopes

Token Usage

Include the token in the Authorization header:

Code
 
Authorization: Bearer {access_token}

Token Expiry

The client_credentials grant does not issue refresh tokens (RFC 6749 §4.4.3). When the token expires, request a new one by calling this endpoint again.

Errors

HTTP	Error	Description
401	invalid_client	Client ID or Secret is incorrect
400	unsupported_grant_type	Wrong grant_type value
400	invalid_request	Missing required parameters

Notes

• Use the returned access_token in the Authorization: Bearer header for all API calls
• Client ID and Secret are available at OmaxTelecom Console