To gain access to our API, you need a valid token in an [Authorization header](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Authorization)!

The token is granted by our API in exchange for a [Client ID / Client Secret pair](https://docs.certn.co/api/guides/use-the-api). This can also be handled by third party OAuth client libraries.

### Example Python request (replace CLIENT_ID and CLIENT_SECRET):

```python
import requests

data = {
    'grant_type': 'client_credentials',
}

response = requests.post('https://api.certn.co/token/', data=data, auth=('CLIENTID', 'CLIENTSECRET'))
```

- Replace `TOKEN` with your API key in the following header:

```
{ 'Authorization': 'Bearer TOKEN' }
```

Include this header in every call to our API, and keep it secure. It is your access key.

## Token lifespan

Token lifespan is indicated by the `expires_in` parameter returned when a new token is requested. The default value is `36000` seconds (10 hours).