Create an access token

POST 
/access-tokens

Creates a personal access token (PAT) for the calling user. The request must use a valid Cognito session token; a PAT cannot be used to create another PAT. The user must be active and have access to the specified role. On success, returns Message, AccessToken, and AccessTokenId.

Request

Responses

200

Token created successfully. Message is either "Successfully created access token" or "Successfully created access token for service user". AccessToken contains the JWT and is returned only once. AccessTokenId contains the token ID.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

400

Validation or authorization failure. Body is {"Message": " - "}. Common codes: IPV-1001 (empty field), GE-1034 (expiry in past/invalid), AUTH-1003 (no role access), AUTH-1012 (inactive user), IPV-1036 / IPV-1012 / IPV-1008 (alert day validation), DB-1001 (DynamoDB put failed).

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

500

Backend failure, or creating a PAT with another PAT (Message "Access tokens cannot be created using another access token"). Other failures typically RTE-1001 via EMF-1001. Missing required body keys may KeyError into 500.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers