Authentication

Access Token Generation (Client Credentials)

This guide explains how to generate an OAuth2 access token using the Client Credentials flow.

Endpoint: POST /oauth2/token

Base URL: https://api.hyblockcapital.com/v2

Auth Type: Basic Auth

Body: application/x-www-form-urlencoded

Grant Type: client_credentials

1) Prerequisites

You will need:

API Key (x-api-key)

OAuth client credentials

client_id

client_secret

These credentials are used only for generating an access token.

2) Token Endpoint Spec

Request

Method

Full URL

https://api.hyblockcapital.com/v2/oauth2/token

Headers

Body

grant_type=client_credentials

3) Generate the Basic Auth Header

The Authorization header must be:

Authorization: Basic BASE64(client_id:client_secret)

Example encoding:

client_id:client_secret -> Y2xpZW50X2lkOmNsaWVudF9zZWNyZXQ=

Then:

Authorization: Basic Y2xpZW50X2lkOmNsaWVudF9zZWNyZXQ=

4) cURL Example

5) Response Format

Successful response returns:

{
  "access_token": "<token>",
  "expires_in": 84706,
  "token_type": "Bearer"
}

access_token: token required for all protected API endpoints

expires_in: token TTL (seconds)

token_type: Bearer

6) Use Token in API Requests

Include both:

7) Token Caching Strategy (Recommended)

Because tokens expire (expires_in), implement:

Cache token (memory / redis)

Refresh when:

expired, or

API returns 401

Reference algorithm

Try using cached token

If missing/expired → request new token

8) Common Errors

`401 Unauthorized`

Common reasons:

Incorrect base64 encoding (must be client_id:client_secret)

Incorrect credentials

Using Bearer instead of Basic for /oauth2/token

`403 Forbidden`

Missing/invalid x-api-key

`415 Unsupported Media Type`

Wrong Content-Type (must be application/x-www-form-urlencoded

Access Token Generation (Client Credentials)#

1) Prerequisites#

2) Token Endpoint Spec#

Request#

3) Generate the Basic Auth Header#

4) cURL Example#

5) Response Format#

6) Use Token in API Requests#

7) Token Caching Strategy (Recommended)#

8) Common Errors#

401 Unauthorized#

403 Forbidden#

415 Unsupported Media Type#