# Obtain an access token

**POST /oauth/token**

Exchanges OAuth client credentials for a JWT access token. The returned `access_token` must be sent as a Bearer token in the `Authorization` header on all subsequent requests, together with the `lw-subscription-key` header.

**Note:** this endpoint is served from the gateway root (`https://gateway.lwolf.com`) rather than a service base path.


## Servers
- Production API gateway: https://gateway.lwolf.com (Production API gateway)
- Environment-specific host (e.g. pre-production): https://api.pre.lwolf.com (Environment-specific host (e.g. pre-production))



## Parameters



### Body: application/json (object)

- **grant_type** (string)
  OAuth 2.0 grant type. Always `client_credentials`.

- **client_id** (string)
  OAuth client identifier issued by Lone Wolf.

- **client_secret** (string)
  OAuth client secret issued by Lone Wolf.

- **audience** (string)
  Token audience. Always `https://api.lwolf.com`.

- **lwt_client_id** (string(uuid))
  Lone Wolf client (tenant) GUID.



## Responses
### 200
Token issued successfully.

#### Body: application/json (object)
- **access_token** (string)
  JWT access token to be sent as a Bearer token.

- **token_type** (string)

- **expires_in** (integer)
  Token lifetime in seconds.


### 400
The request is malformed or contains invalid parameters.

#### Body: application/json (object)
- **error** (string)
  Error code or short error name.

- **message** (string)
  Human-readable error description.


### 401
The access token is missing, invalid, or expired.

#### Body: application/json (object)
- **error** (string)
  Error code or short error name.

- **message** (string)
  Human-readable error description.


### 403
The caller is not permitted to perform this operation.

#### Body: application/json (object)
- **error** (string)
  Error code or short error name.

- **message** (string)
  Human-readable error description.


### 404
The requested resource does not exist.

#### Body: application/json (object)
- **error** (string)
  Error code or short error name.

- **message** (string)
  Human-readable error description.



[Powered by Bump.sh](https://bump.sh)