# API Reference

{% hint style="info" %}
**URL Base**:

* UAT: <mark style="color:blue;">`https://identityhomolog.acesso.io`</mark>;
* Production: <mark style="color:blue;">`https://identity.acesso.io`</mark>.
  {% endhint %}

## Obtain access token

> Endpoint to obtain the access token

```json
{"openapi":"3.0.3","info":{"title":"OAuth2 Token API","version":"1.0.0"},"servers":[{"url":"https://identityhomolog.acesso.io","description":"Staging environment"}],"paths":{"/oauth2/token":{"post":{"summary":"Obtain access token","description":"Endpoint to obtain the access token","operationId":"getJwtToken","tags":["Authentication"],"requestBody":{"required":true,"content":{"application/x-www-form-urlencoded":{"schema":{"type":"object","properties":{"grant_type":{"type":"string"},"assertion":{"type":"string","description":"Signed JWT in compact JWS format"}},"required":["grant_type","assertion"]}}}},"responses":{"200":{"description":"JWT access token successfully obtained","content":{"application/json":{"schema":{"type":"object","properties":{"access_token":{"type":"string","description":"JWT access token"},"expires_in":{"type":"integer","description":"Expiration time in seconds"},"token_type":{"type":"string"}}}}}},"401":{"description":"Unauthorized (e.g., invalid signature or expired JWT)","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string"},"error_description":{"type":"string"}}}}}}}}}}}
```

### Errors <a href="#erros-autenticacao" id="erros-autenticacao"></a>

<table><thead><tr><th width="130">Name</th><th>Description</th></tr></thead><tbody><tr><td>1.0.1</td><td>Check if the ID provided in the formation of "iss" is the correct tenant ID given during the generation of the private key.</td></tr><tr><td>1.0.14</td><td>Check with the project manager if the application being used is active.</td></tr><tr><td>1.1.1</td><td>The "scope" parameter was not provided in the payload of the JWT used in the request.</td></tr><tr><td>1.2.4</td><td>The JWT used in the request has expired. Check the value specified in the "exp" field of the payload.</td></tr><tr><td>1.2.5</td><td>The JWT used in the request cannot be validated. Verify the parameters provided and ensure that it was signed correctly.</td></tr><tr><td>1.2.6</td><td>The private key used to sign the JWT in the request is no longer acceptable. Request new credentials for the account used.</td></tr><tr><td>1.2.7</td><td>The JWT used in the request is no longer acceptable as it has already been used. Generate a new token to make a new request.</td></tr><tr><td>1.2.11</td><td>The account used is not active.</td></tr><tr><td>1.2.14</td><td>The account used does not have the necessary permissions.</td></tr><tr><td>1.2.18</td><td>The account used has been temporarily locked due to exceeding the number of invalid authentication attempts.</td></tr><tr><td>1.2.19</td><td>The account used is not authorized to impersonate another user account (remove the "sub" parameter from the payload).</td></tr><tr><td>1.2.20<br>1.2.21</td><td>Failed to decode the JWT used in the request. Use a new token by including only the fields specified in the "Mandatory Fields" and "Additional Fields" sections, adhering to the naming, semantics, and type of each field.</td></tr><tr><td>1.2.22</td><td>The JWT used in the request contains additional fields in the payload that are not allowed. Use a new token by including only the fields specified in the "Mandatory Fields" and "Additional Fields" sections, adhering to the naming, semantics, and type of each field.</td></tr><tr><td>1.3.1</td><td>The account used has source IP restrictions.</td></tr><tr><td>1.3.2</td><td>The account used has access date/time restrictions.</td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://devcenter.unico.io/unico-idcloud/by-client-integration/authentication/api-reference.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.