> Part of [WHCC Developer Documentation](https://www.whcc.com/developer/llms.txt)

**Legacy** This page is reference for integrations already built on the Editor API. It remains supported. New integrations use the [WHCC API](https://www.whcc.com/developer/docs/quick-start/index.html.md).

# Authentication

Version 1.0 · Updated 2026-09-03

In order to make calls to the Editor API endpoints you'll first need to request an access token. All you'll need to get an access token is the key and secret supplied by WHCC. Once you've received an access token it's valid for 90 minutes, so it's a good idea to request an access token before any series of consecutive calls to the API.

> The Editor API and the Order Submit API currently use different endpoints and tokens, your access token for calling Editor API endpoints will not work with the Order Submit API and vice-versa.

Many endpoint requests require an `accountId`. Pass an `accountId` claim into the `access-token` request; the value should be a string that is meaningful and unique, often the id of a user in your system.

## POST `/auth/access-token`

Content-type: application/json

## curl

### Example Request

```shell
curl https://prospector.dragdrop.design/api/v1/auth/access-token \
	-H "Accept: application/json" \
	-H "Content-Type: application/json" \
	-d '{
			"key":"12e1as132e2132aA0",
			"secret":"1291eaew2_3ehiew0-5eheudis92hC-0hsdas0d1n38L",
			"claims": {
				"accountId": "identifiable_id"
			}
		}'
```

### Example Response

```json
{
	"accessToken": "eyJhbGciOiJIU123432ssfsazI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJwcm9zcGVjdG9yLWRldi5kcmFnZHJvcC5kZXNpZ24iLCJhdWQiOiJwcm9zcGVjdG9yLWRldi5kcmFnZHJvcC5kZXNpZ24iLCJzdWIiOiJ1TnNHNEdGNnN1TGRETXFaZSIsImlhdCI6MTUzNTA2MjU2NSwianRpIjoiRjVIajNTRlRFdkFhOXJTQ20iLCJleHAiOjE1MzUwNjM0NjUsInNjb3BlIjoiY2xpZW50Iiwib3JnSWQiOiI1THNvb29XdUhHWUZNYXFiYiJ9.g13SLpmBvXpD_zOJW_-MKtoqOAwqZh2cnVH1Tw1Ices",
	"expires": 1535063465
}
```

- **`accessToken`**: The access token to be used for subsequent calls.
- **`expires`**: The expiration time of your access token, as a unix timestamp.

> ## What's Next
>
> Learn about [Editing](https://www.whcc.com/developer/docs/legacy/editor-api/editing/index.html.md) products