Generate Access Token

Generate a new client token (JWT)

POST /generate_access_token

Request

{
  "client_id": "client123",
  "duration_secs": 3600,
  "metadata": {
    "user_name": "John Doe",
    "company": "Acme Corp"
  }
}

Response (200 OK)

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expires_in": 3600
}

Use your org-level API key (Bearer fl-xxxxxx) to create a JWT token for a specific client. The token can be used at client-facing endpoints.

Response (200 OK)

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expires_in": 3600
}

Request

{
  "client_id": "client123",
  "duration_secs": 3600,
  "metadata": {
    "user_name": "John Doe",
    "company": "Acme Corp"
  }
}

Authorizations

Authorization · string · header · required

Org-level key (format: Bearer fl-xxxxx) used to manage client tokens.

Body

application/json

client_id · string · required

Identifier for the client

duration_secs · integer · required

Token lifetime in seconds

metadata · object

Optional metadata to store with the token

Response

200

application/json

Returns the newly generated token

access_token · string

The JWT token

expires_in · integer

How long the token remains valid (in seconds)