Generate the admin token
Most REST calls to Magento require an authorization token. The token allows Magento to verify that the caller is authorized to access a system resource. To get a token, you must specify the user’s username and password in the payload.
By default, an admin token is valid for 4 hours. To change this value, log in to Admin and go to Stores > Settings > Configuration > Services > OAuth > Access Token Expiration > Admin Token Lifetime (hours).
See Token-based authentication for more information about authorization tokens.
Endpoint:
POST <host>/rest/<store_code>/V1/integration/admin/token
Headers:
Content-Type
application/json
Payload:
1
2
3
4
{
"username": "admin",
"password": "123123q"
}
Response:
Magento generates the admin’s access token
5r8cvmpr11j6gmau8990rcj2qk7unh8i
This token must be specified in the authorization header of every call that requires admin permissions.
Verify this step
There are no additional verification steps. Tokens are not displayed in Admin.