> For the complete documentation index, see [llms.txt](https://payu-docs.gitbook.io/payouts-integration/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://payu-docs.gitbook.io/payouts-integration/1.-authentication/generate-token-using-username-password.md).

# API to Generate Token using username/password

Generate a token by using the payout merchant username and password

{% tabs %}
{% tab title="Production" %}
<https://accounts.payu.in/oauth/token>
{% endtab %}

{% tab title="Testing" %}
<https://uat-accounts.payu.in/oauth/token>
{% endtab %}
{% endtabs %}

## **Request Params**

| **Key**     | **Description**                                                                                                                                                                                | **Data type** | **Mandatory** | **Possible Values**                                                                                                                                                                                                       |
| ----------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------- | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| client\_id  | <p>This is a public client id to be used by all payouts merchants.</p><p>Please note: you can use the same client id mentioned under ‘possible values’ column depending on the environment</p> | String        | yes           | <p> <strong>Production client\_id</strong> : ccbb70745faad9c06092bb5c79bfd919b6f45fd454f34619d83920893e90ae6b<br><strong>Test client\_id</strong>  : 6f8bb4951e030d4d7349e64a144a534778673585f86039617c167166e9154f7e</p> |
| grant\_type | Constant value                                                                                                                                                                                 | String        | yes           | password                                                                                                                                                                                                                  |
| username    | Registered mobile or email                                                                                                                                                                     | String        | yes           |                                                                                                                                                                                                                           |
| password    | Registered Account password                                                                                                                                                                    | String        | yes           |                                                                                                                                                                                                                           |
| scope       | Constant value                                                                                                                                                                                 | String        | yes           | create\_payout\_transactions                                                                                                                                                                                              |

{% hint style="success" %}
public client id does not vary from merchant to merchant, use the id mentioned above and get going
{% endhint %}

## **Example**

**Sample Request (in test env):**

```
curl -X POST \
 https://uat-accounts.payu.in/oauth/token \
 -H 'cache-control: no-cache' \
 -H 'content-type: application/x-www-form-urlencoded' \
 -d 'grant_type=password&scope=create_payout_transactions&client_id=6f8bb4951e030d4d7349e64a144a534778673585f86039617c167166e9154f7e&username=payouttest4%40mailinator.com&password=Tester%40123&='
```

{% hint style="danger" %}
Pro Tip: Remember to have the Content-Type set as x-www-form-urlencoded to avoid “invalid request” errors
{% endhint %}

**Sample Response :**

```
{
 "access_token": "581b0657b38a56bb4296f774852f208f6d84a23d8f1bf61c63c15de60d43ee76",
 "token_type": "Bearer",
 "expires_in": 7199,
 "refresh_token": "ff8e094ecfa11fb390931f779ae62c0836f97bbaedcf5551c88eff826da3239a",
 "scope": "create_payout_transactions",
 "created_at": 1585216027,
 "user_uuid": "11e8-5a8f-05faaaa4-84a5-020d245326e4"
}
```

## **Response Params**

| **Key**        | **Description**                                                                                                        |
| -------------- | ---------------------------------------------------------------------------------------------------------------------- |
| access\_token  | This is the security token. This will be used in further api calls                                                     |
| token\_type    | Type of token                                                                                                          |
| expire\_in     | This is the TTL, Access token will get expired in return seconds.                                                      |
| refresh\_token | This will be used to refresh the access\_token. Api detail is given below                                              |
| scope          | Allowed scopes in generated security token eg the generated token can be used only for payout api requests             |
| created\_at    | Time of creation in milliseconds                                                                                       |
| user\_uuid     | Unique identifier for the user. Read more about uuid [here](https://stackoverflow.com/questions/292965/what-is-a-uuid) |

{% hint style="success" %}
You will learn more about refresh token soon
{% endhint %}