clientId and clientSecret, and receive a short-lived (10 minutes) accessToken and a long-lived (30 days) refreshToken.Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Body
application/json

