> For the complete documentation index, see [llms.txt](https://devcenter.unico.io/you/Ol1H6eGO4sQvPYB1Nmyl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://devcenter.unico.io/you/Ol1H6eGO4sQvPYB1Nmyl/authentication/api-reference.md).

# API Reference

{% hint style="info" %}
**URL Base**:

* UAT: <mark style="color:blue;">`https://identityhomolog.acesso.io`</mark>.
* Production: <mark style="color:blue;">`https://identity.acesso.io`</mark>.
  {% endhint %}

## Obtain access token

> Endpoint to obtain the access token

```json
{"openapi":"3.0.3","info":{"title":"OAuth2 Token API","version":"1.0.0"},"servers":[{"url":"https://identityhomolog.acesso.io","description":"Staging environment"}],"paths":{"/oauth2/token":{"post":{"summary":"Obtain access token","description":"Endpoint to obtain the access token","operationId":"getJwtToken","tags":["Authentication"],"requestBody":{"required":true,"content":{"application/x-www-form-urlencoded":{"schema":{"type":"object","properties":{"grant_type":{"type":"string"},"assertion":{"type":"string","description":"Signed JWT in compact JWS format"}},"required":["grant_type","assertion"]}}}},"responses":{"200":{"description":"JWT access token successfully obtained","content":{"application/json":{"schema":{"type":"object","properties":{"access_token":{"type":"string","description":"JWT access token"},"expires_in":{"type":"integer","description":"Expiration time in seconds"},"token_type":{"type":"string"}}}}}},"401":{"description":"Unauthorized (e.g., invalid signature or expired JWT)","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string"},"error_description":{"type":"string"}}}}}}}}}}}
```

### Errors <a href="#erros-autenticacao" id="erros-autenticacao"></a>

<table><thead><tr><th width="130">Name</th><th>Description</th></tr></thead><tbody><tr><td>1.0.1</td><td>Check if the ID provided in the formation of "iss" is the correct tenant ID given during the generation of the private key.</td></tr><tr><td>1.0.14</td><td>Check with the project manager if the application being used is active.</td></tr><tr><td>1.1.1</td><td>The "scope" parameter was not provided in the payload of the JWT used in the request.</td></tr><tr><td>1.2.4</td><td>The JWT used in the request has expired. Check the value specified in the "exp" field of the payload.</td></tr><tr><td>1.2.5</td><td>The JWT used in the request cannot be validated. Verify the parameters provided and ensure that it was signed correctly.</td></tr><tr><td>1.2.6</td><td>The private key used to sign the JWT in the request is no longer acceptable. Request new credentials for the account used.</td></tr><tr><td>1.2.7</td><td>The JWT used in the request is no longer acceptable as it has already been used. Generate a new token to make a new request.</td></tr><tr><td>1.2.11</td><td>The account used is not active.</td></tr><tr><td>1.2.14</td><td>The account used does not have the necessary permissions.</td></tr><tr><td>1.2.18</td><td>The account used has been temporarily locked due to exceeding the number of invalid authentication attempts.</td></tr><tr><td>1.2.19</td><td>The account used is not authorized to impersonate another user account (remove the "sub" parameter from the payload).</td></tr><tr><td>1.2.20<br>1.2.21</td><td>Failed to decode the JWT used in the request. Use a new token by including only the fields specified in the "Mandatory Fields" and "Additional Fields" sections, adhering to the naming, semantics, and type of each field.</td></tr><tr><td>1.2.22</td><td>The JWT used in the request contains additional fields in the payload that are not allowed. Use a new token by including only the fields specified in the "Mandatory Fields" and "Additional Fields" sections, adhering to the naming, semantics, and type of each field.</td></tr><tr><td>1.3.1</td><td>The account used has source IP restrictions.</td></tr><tr><td>1.3.2</td><td>The account used has access date/time restrictions.</td></tr></tbody></table>