Get Access Token
Issue an access token for a registered Mobile ID member on a specific device. Call this before any protected Mobile ID API.
What to do next
Use access_token as Authorization: Bearer <ACCESS_TOKEN> on protected APIs. Keep refresh_token and request a new pair from the refresh endpoint before access_ttl seconds elapse.
/api/member/auth/tokenparams is an encrypted JSON string containing creference (member reference), oreference (organisation reference), and app_code (application code). XDeviceID is the encrypted device identifier.
POST /api/member/auth/token
XDeviceID: <ENCRYPTED_DEVICE_ID>
Content-Type: application/json
Accept: application/json{
"params": "<ENCRYPTED_PARAMS>"
}