Create a token

Mint a client-credentials token

POST https://nofy.encipher.co.tz/v1/oauth2/token/

Exchanges your client id and secret for a Bearer token. Use it on every call until expires_in seconds pass, then mint another. The body is form-encoded, not JSON.

Authorizations

None. This endpoint authenticates with the client id and secret in the body.

Body application/x-www-form-urlencoded

grant_type string required

Always client_credentials.

Available options: client_credentials

client_id string required

Your OAuth application's client id.

client_secret string required

The secret issued with it. Keep it on your servers.

Responses

200 A Bearer token.

401 Unknown client or wrong secret.

Read the guideAuthentication

Request

curl -X POST https://nofy.encipher.co.tz/v1/oauth2/token/ \
  -d grant_type=client_credentials \
  -d client_id=YOUR_CLIENT_ID \
  -d client_secret=YOUR_CLIENT_SECRET

import requests

response = requests.post(
    "https://nofy.encipher.co.tz/v1/oauth2/token/",
    data={
        "grant_type": "client_credentials",
        "client_id": "YOUR_CLIENT_ID",
        "client_secret": "YOUR_CLIENT_SECRET"
    },
)
print(response.status_code, response.json())

const response = await fetch("https://nofy.encipher.co.tz/v1/oauth2/token/", {
  method: "POST",
  headers: {
    "Content-Type": "application/x-www-form-urlencoded",
  },
  body: new URLSearchParams({
    "grant_type": "client_credentials",
    "client_id": "YOUR_CLIENT_ID",
    "client_secret": "YOUR_CLIENT_SECRET"
  }),
});
console.log(response.status, await response.json());

Response

{
  "access_token": "abc123",
  "expires_in": 36000,
  "token_type": "Bearer",
  "scope": "read write"
}

{
  "error": "invalid_client"
}