Request an access token

Endpoint: POST /go/packageOpenApiWeb/OpenApiV2/applyToken

Each site uses its own appId and appSecret. Request them from Support.

Do not send Authorization and do not send Signature on this call. A JSON body is all that is needed.

For the full field reference see API reference · applyToken.

Open applyToken in API Reference and click Test Request. If Try-it settings already have appId / appSecret, the Client body is filled in plaintext; if not, the editor shows a hint you can replace. Send transmits only the values visible in that window.

Request example

{
  "appId": "your_app_id",
  "appSecret": "your_app_secret"
}

Response example

{
  "errCode": 0,
  "errMsg": "success",
  "data": {
    "accessToken": "your_access_token",
    "expired": 1744346335,
    "expiredSecond": 3600
  }
}

• expired: token expiry moment, Unix seconds (absolute time). Schedule token refresh from this field: obtain a new token before expired (with a safety margin; do not hard-code a fixed refresh interval)
• expiredSecond: validity duration in seconds, fixed at 3600 (1 hour)
• On failure check errCode / errMsg against the error-code appendix