Access Token Generation

Once you get the refresh token, you can make the following API request for an access token.

https://app.candidatezip.com/accessToken?client_id=<CLIENT_ID>&redirect_uri=<REDIRECT_URL>&grant_type=authorization_code&client_secret=<CLIENT_SECRET>&code=<CODE>
This includes the following query parameters:
Note: You can use Postman application for the access token generation using the below parameter.
  • client_id: your client_id received from App Registration.
  • client_secret: your client_secret received from App Registration.
  • grant_type: set to the authorization_code.
  • redirect_uri: set to the same value as in the previous step
  • code: set to the value of the authorization code you received from the last call

Example: Success Response

{
    "access_token": "ACCESS_TOKEN",
}

Example: Fail Response

{
    "error": "access denied","error_description": "client_id is required",
}

If this request is successful, the Authorization Server will authenticate the client, validate the authorization code and the redirect URL, and respond with a JSON payload containing an access token.