token

access_token
Type: string

Newly generated access token. Valid for 5–60 minutes (default: 5 minutes). This token must be included in API requests to access Punchh API endpoints. It is passed in the Authorization header as Bearer <access_token>.
expires_in
Type: integer

Lifespan of the access_token in seconds. Default is 300 (5 minutes; the minimum value is 300 and the maximum value is 3600 seconds).
refresh_token
Type: string

Token used to obtain a new access token without re-authenticating. Valid for 1 to 30 days (default: 1 day)
token_type
Type: string

Type of token issued. The value is Bearer, indicating a Bearer token used in the Authorization header.