# Request Token

Exchange an API key for a short-lived access token. See [Authentication](/authentication/) for when to use tokens instead of API keys.

```
POST https://api.reson8.dev/v1/auth/token
```

## Request

### Headers

| Header        | Value              | Description  |
|---------------|--------------------|--------------|
| Authorization | `ApiKey <api_key>` | Your API key |

### Example

```bash
curl -X POST https://api.reson8.dev/v1/auth/token \
  -H "Authorization: ApiKey <your_api_key>"
```

```python
import requests

response = requests.post(
    "https://api.reson8.dev/v1/auth/token",
    headers={"Authorization": "ApiKey <your_api_key>"},
)

token = response.json()["access_token"]
```

## Response

`200 OK`

### Fields

| Field          | Type   | Description                                |
|----------------|--------|--------------------------------------------|
| `access_token` | string | The token to use in `Authorization` header |
| `token_type`   | string | Always `Bearer`                            |
| `expires_in`   | number | Token lifetime in seconds, currently 600 (10 minutes). Not configurable per request |

### Example

```json
{
  "access_token": "<your_access_token>",
  "token_type": "Bearer",
  "expires_in": 600
}
```

## Errors

| Status                    | Code                    | Description                                             |
|---------------------------|-------------------------|---------------------------------------------------------|
| 401 Unauthorized          | -                       | Missing or invalid API key. The response body is empty. |
| 500 Internal Server Error | `internal_server_error` | Unexpected server error, returned as `application/problem+json` |