Generate a access token and a refresh token

Prod Env

https://api.serasaexperian.com.br

POST

/security/iam/v1/generate-token

Responsibilities

This endpoint has the function of generate a access token and a refresh token (if user selected remember-me option). Note, if user selected remember-me option, the user access token has a 10 minutes expire time. If not, user access token has 30 minutes expire.

Requirements

Use "Basic" authentication to authenticate the client, example: Basic base64(client_id:client_secret)

To access this endpoint, the client must have one of the following sets of roles:

ROLE_CLI-1STPARTY and ROLE_CLI-AUTH-BASIC

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST 'https://api.serasaexperian.com.br/security/iam/v1/generate-token' \
--header 'Content-Type: application/json' \
--data-raw '{
    "clientId": "5c6e91ed8321222db87124a3",
    "defaultClientId": "6021a87ee80a460ad3791511",
    "tokenRequestType": "USER",
    "deviceId": "604b856442b4441b91c99fe4",
    "userId": "5ef904d4b91ac90414895f3c",
    "logon": "A123321B",
    "param": "D1VEYFB9DQVN8EVE6ESRUXW1DPPG18DNYNRMNPGV0LYIS4Q9DLVNB29D6SG1A",
    "rememberMe": false,
    "loginGrantedAuthorities": "AUTH-IDENTIFIED"
}'

Response Example

200 - Example 1

[
    {
        "code": "01",
        "message": "message reference code error"
    }
]

Request

Body Params application/json

Examples

Responses

🟢200OK

application/json

Unexpected Error.
This endpoint can throw the following errors:

[{"code": "79", "message": "The TokenRequestType is not implemented."}]

Body

🟢201Created

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🟠404Record Not Found

🔴500Server Error

Modified at 2025-04-11 12:00:41

Deletes a group dependency.

Generate a access token and a refresh token

Responsibilities#

Requirements#

Request

Responses

Responsibilities

Requirements