{
  "info": {
    "_postman_id": "da8ae183-4669-4d94-8434-380b331e7c44",
    "name": "One-Time Login Applications Token API",
    "description": "Login users using one-time login methods like magic links or OTPs. This implements a backend-to-backend integration for authentication.",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
    "createdAt": "2026-07-28T11:05:16.000Z",
    "updatedAt": "2026-07-28T11:05:16.000Z",
    "lastUpdatedBy": "35240",
    "uid": "35240-da8ae183-4669-4d94-8434-380b331e7c44"
  },
  "item": [
    {
      "name": "v1",
      "item": [
        {
          "name": "token",
          "item": [
            {
              "name": "Exchange code for token",
              "id": "c7939284-de4a-465f-85fa-cf43e4f1846e",
              "protocolProfileBehavior": {
                "disableBodyPruning": true
              },
              "request": {
                "method": "POST",
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/json"
                  },
                  {
                    "key": "Accept",
                    "value": "application/json"
                  }
                ],
                "body": {
                  "mode": "raw",
                  "raw": "{\n  \"code\": \"<string>\",\n  \"client_id\": \"<string>\",\n  \"client_secret\": \"<string>\"\n}",
                  "options": {
                    "raw": {
                      "headerFamily": "json",
                      "language": "json"
                    }
                  }
                },
                "url": {
                  "raw": "{{baseUrl}}/v1/token",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "v1",
                    "token"
                  ]
                },
                "description": "Retrieve ID and access tokens. This API is used to retrieve ID and access tokens using the code that was returned in the redirect URI as a query parameter (for example, when the user clicks a magic link). It may also create a new user if create_new_user was set to true in the send request and no user exists for the email address or phone number (depending on the flow)."
              },
              "response": [
                {
                  "id": "965f51b9-b508-4940-b2a1-3944c291cfa8",
                  "name": "New Response",
                  "originalRequest": {
                    "method": "POST",
                    "header": [
                      {
                        "key": "Content-Type",
                        "value": "application/json"
                      },
                      {
                        "key": "Accept",
                        "value": "application/json"
                      }
                    ],
                    "body": {
                      "mode": "raw",
                      "raw": "{\n  \"code\": \"<string>\",\n  \"client_id\": \"<string>\",\n  \"client_secret\": \"<string>\"\n}",
                      "options": {
                        "raw": {
                          "headerFamily": "json",
                          "language": "json"
                        }
                      }
                    },
                    "url": {
                      "raw": "{{baseUrl}}/v1/token",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "v1",
                        "token"
                      ]
                    }
                  },
                  "status": "OK",
                  "code": 200,
                  "_postman_previewlanguage": "json",
                  "header": [
                    {
                      "key": "Content-Type",
                      "value": "application/json"
                    }
                  ],
                  "cookie": [],
                  "responseTime": null,
                  "body": "{\n  \"id_token\": \"<string>\",\n  \"access_token\": \"<string>\",\n  \"refresh_token\": \"<string>\",\n  \"is_user_created\": \"<boolean>\"\n}",
                  "createdAt": "2026-07-28T11:05:16.000Z",
                  "updatedAt": "2026-07-28T11:05:16.000Z",
                  "uid": "35240-965f51b9-b508-4940-b2a1-3944c291cfa8"
                },
                {
                  "id": "24a737b2-c00b-4230-b1b7-1658c5880c8c",
                  "name": "New Response",
                  "originalRequest": {
                    "method": "POST",
                    "header": [
                      {
                        "key": "Content-Type",
                        "value": "application/json"
                      },
                      {
                        "key": "Accept",
                        "value": "application/json"
                      }
                    ],
                    "body": {
                      "mode": "raw",
                      "raw": "{\n  \"code\": \"<string>\",\n  \"client_id\": \"<string>\",\n  \"client_secret\": \"<string>\"\n}",
                      "options": {
                        "raw": {
                          "headerFamily": "json",
                          "language": "json"
                        }
                      }
                    },
                    "url": {
                      "raw": "{{baseUrl}}/v1/token",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "v1",
                        "token"
                      ]
                    }
                  },
                  "status": "Bad Request",
                  "code": 400,
                  "_postman_previewlanguage": "json",
                  "header": [
                    {
                      "key": "Content-Type",
                      "value": "application/json"
                    }
                  ],
                  "cookie": [],
                  "responseTime": null,
                  "body": "{\n  \"message\": [\n    \"<string>\",\n    \"<string>\"\n  ],\n  \"error_code\": \"<number>\"\n}",
                  "createdAt": "2026-07-28T11:05:16.000Z",
                  "updatedAt": "2026-07-28T11:05:16.000Z",
                  "uid": "35240-24a737b2-c00b-4230-b1b7-1658c5880c8c"
                }
              ],
              "createdAt": "2026-07-28T11:05:16.000Z",
              "updatedAt": "2026-07-28T11:05:16.000Z",
              "uid": "35240-c7939284-de4a-465f-85fa-cf43e4f1846e"
            }
          ],
          "id": "8adb77bf-5cf5-4763-96f0-e595043983ad",
          "createdAt": "2026-07-28T11:05:16.000Z",
          "updatedAt": "2026-07-28T11:05:16.000Z",
          "uid": "35240-8adb77bf-5cf5-4763-96f0-e595043983ad"
        }
      ],
      "id": "383ef829-e4db-40a8-8d76-09f924ca5ba1",
      "createdAt": "2026-07-28T11:05:16.000Z",
      "updatedAt": "2026-07-28T11:05:16.000Z",
      "uid": "35240-383ef829-e4db-40a8-8d76-09f924ca5ba1"
    }
  ],
  "variable": [
    {
      "key": "baseUrl",
      "value": "https://api.sbx.transmitsecurity.io/cis"
    }
  ]
}