How to obtain an OAuth access token using a Personal Access Token

This guide explains how to manually obtain an access token for local testing using a Personal Access Token.

Obtaining a Personal Access Token

1. Navigate to https://myaccount.goto.com.
2. Click on Developer Tools in the left menu.
3. Click the Create token button.
4. Provide a name for your token.
5. Enable the scopes you want your token to allow, then click Next. Note: These must match the scopes enabled in your OAuth Client.
6. Copy the token and save it in a secure place. Once saved, click the checkbox acknowledging you have stored the token, then click Done.

Create Personal Access Token Sample

Enable Personal Access Token Grant Flow on Your OAuth Client

1. Navigate to https://developer.logmeininc.com/clients.
2. Click the pencil icon on the far right for the client you wish to edit.
3. Click on Grant types in the left menu.
4. Toggle Personal Access Token to enabled.
5. Click Save in the bottom right.

Enable Personal Access Token Sample

Obtain an Access Token

You can now exchange the Personal Access Token for an API access token.

Request an access token using a POST call. This call can be sent through Postman, cURL, or other HTTP clients.

The cURL example below shows the full request. Details on creating the Authorization header and other POST data follow the code sample.

curl -X POST "https://authentication.logmeininc.com/oauth/token" \
  -H "Authorization: Basic YTIwfAKeNGYtODY4YS00MzM5LTkzNGYtNGRhMmQ..." \
  -H "Accept:application/json" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "grant_type=personal_access_token&pat=iS0vynEEvRFA9i6kZ8gvNDnnOGE..."

The personal access token value above is truncated for clarity.

Authorization Header

The Authorization header must contain the client ID and secret encoded in Base64 format. You can use the following Bash snippet to generate it:

echo -n "CLIENT_ID:CLIENT_SECRET" | base64

where CLIENT_ID and CLIENT_SECRET are replaced with your actual values.

The encoded value will look like:

YTIwfAKeNGYtODY4YS00MzM5LTkzNGYtNGRhMmQ...

Add this value to the Authorization header after the word Basic as shown in the cURL example above.

Data Parameters

Response Example

IMPORTANT: The access token is truncated. It is a large string.

{
  "access_token": "eyJraWQiOiJvYXV0aHYyLmxt666...",
  "token_type": "Bearer",
  "expires_in": 3600,
  "scope": "users.v1.lines.read calls.v2.initiate",
  "principal": "mister.jones@fakemail.com"
}

Response Data

The following table describes the response fields.

This access token can now be used to authorize API requests by setting it in the Authorization header with the following format: Authorization: Bearer {access_token}. For example, to make a GET Me request to the SCIM API (which provides useful information about the authenticated user):

curl -H "Accept: application/json" \
-H "Authorization: Bearer eyJraWQ..." \
"https://api.getgo.com/identity/v1/Users/me"