Issue a Meridian Accounts access token
Mints a JWT for a Meridian user. For client_credentials grants, the user is identified by the X-Meridian-User-Id header: it must be provided for MULTI_USER integrations and omitted for SINGLE_USER integrations (the single configured user is used). For refresh_token grants, the user is derived from the supplied refresh token.
Authorizations
Meridian HMAC header authentication, for server-to-server calls.
Required headers:
X-Meridian-Api-KeyX-Meridian-TimestampX-Meridian-Program-IdX-Meridian-User-Id(MULTI_USER integrations only)X-Meridian-Signature
X-Meridian-Signature is the HMAC SHA-256 signature of the canonical request string, computed per request. See Authentication for how to construct it.
Headers
Server-to-server (HMAC) requests only. Partner API key issued by Meridian during provisioning.
Server-to-server (HMAC) requests only. Current time in milliseconds since the Unix epoch. Must be within 60 seconds of the request.
Server-to-server (HMAC) requests only. Identifies the program context for the request.
Server-to-server (HMAC) requests only. Identifies the Meridian user targeted by the request. Required for MULTI_USER integrations; omit for SINGLE_USER.
Body
Either a client_credentials or refresh_token grant payload
- Client Credentials Token Body
- Refresh Token Body
Token request payload for the client_credentials grant
OAuth grant type
client_credentials, refresh_token Response
The issued access and refresh tokens
OAuth token response for Meridian Accounts authentication
Bearer access token
"access_token_abc123"
Lifetime of the access token in seconds
3600
Type of token returned
"Bearer"
Refresh token that can be exchanged for a new access token
"refresh_token_abc123"
Space-delimited scopes granted to the access token
"enrollment:get enrollment:activate"
URN describing the type of issued token
"urn:ietf:params:oauth:token-type:access_token"