Get Access Token

The endpoint activates an access token by exchanging an authorization code.

Important Notes:

• Access token duration is 300 seconds
• The IP of the client must be added to WB Allowlist

Request Headers:

• Content-Type: application/x-www-form-urlencoded

POST /oauth2/token

Get Access Token

cURL

curl --request POST \
  --url https://whitebit.com/oauth2/token \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data client_id=YOUR_CLIENT_ID \
  --data client_secret=YOUR_CLIENT_SECRET \
  --data code=AUTHORIZATION_CODE

200

{
  "data": {
    "access_token": "MZM1MDBMMJYTNWM4MI0ZNTIYLTKXNDATNZY1MZHKM2Y2MJY3",
    "expires_in": 300,
    "refresh_token": "ODK5ZTVKZDUTYTI5ZC01NWJHLTGZZDMTYWFKYTNMNJHHMGZM",
    "scope": "codes.apply,show.userinfo",
    "token_type": "Bearer"
  }
}

Body

application/x-www-form-urlencoded

client_id · string · required

The application's client ID

Example:

"YOUR_CLIENT_ID"

client_secret · string · required

The application's client secret

Example:

"YOUR_CLIENT_SECRET"

code · string · required

The authorization code received from the authorization endpoint

Example:

"AUTHORIZATION_CODE"

Response

200

application/json

Successful token exchange

data · object

Show child attributes