> Part of [WHCC Developer Documentation](https://www.whcc.com/developer/llms.txt)

# Authentication

In order to make calls to the Editor API endpoints you'll first need to request an access token. All you'll need to get an access token is the key and secret supplied by WHCC. Once you've received an access token it's valid for 90 minutes, so it's a good idea to request an access token before any series of consecutive calls to the API.

> The Editor API and the Order Submit API currently use different endpoints and tokens, your access token for calling Editor API endpoints will not work with the Order Submit API and vice-versa.

Many endpoint requests require an `accountId`. Passing in an `accountId` claim into the `access-token` request; this value should be a string that is meaningful and unique, often the id of a user in your system.

## POST `/auth/access-token`

Content-type: application/json

## curl

### Example Request

```shell
curl https://prospector.dragdrop.design/api/v1/auth/access-token \
	-H "Accept: application/json" \
	-H "Content-Type: application/json" \
	-d '{
			"key":"12e1as132e2132aA0",
			"secret":"1291eaew2_3ehiew0-5eheudis92hC-0hsdas0d1n38L",
			"claims": {
				"accountId": "identifiable_id"
			}
		}'
```

### Example Response

```json
{
	"accessToken": "eyJhbGciOiJIU123432ssfsazI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJwcm9zcGVjdG9yLWRldi5kcmFnZHJvcC5kZXNpZ24iLCJhdWQiOiJwcm9zcGVjdG9yLWRldi5kcmFnZHJvcC5kZXNpZ24iLCJzdWIiOiJ1TnNHNEdGNnN1TGRETXFaZSIsImlhdCI6MTUzNTA2MjU2NSwianRpIjoiRjVIajNTRlRFdkFhOXJTQ20iLCJleHAiOjE1MzUwNjM0NjUsInNjb3BlIjoiY2xpZW50Iiwib3JnSWQiOiI1THNvb29XdUhHWUZNYXFiYiJ9.g13SLpmBvXpD_zOJW_-MKtoqOAwqZh2cnVH1Tw1Ices",
	"expires": 1535063465
}
```

- **`accessToken`**: The access token to be used for subsequent calls.
- **`expires`**: The expiration time of your access token, as a unix timestamp.

> ## What's Next
>
> Learn about [Editing](https://www.whcc.com/developer/docs/editor-api/editing/index.html.md) products