> ## Documentation index > Fetch the complete documentation index at: https://developer.rhombus.com/llms.txt > Use it to discover all available pages before exploring further. # Get normal seekpoint events and access control seekpoint events > Get normal seekpoint events and access control seekpoint events **Deprecated.** This operation is kept for existing integrations; avoid it in new code. ```http POST https://api2.rhombussystems.com/api/eventSearch/getEventSeekpoints ``` EU organizations send the same request to `https://api2.eu.rhombussystems.com`. ## Authentication and parameters - `x-auth-apikey` (header, required): Your Rhombus API key. Must be accompanied by the `x-auth-scheme` header set to `api-token` (or `partner-api-token` for partner endpoints). - `Authorization` (header): instead of an API key, an OAuth access token (`Bearer `) with the `read` scope. - `x-auth-scheme` (header, string, default: `api-token`): Authentication scheme identifier. Use `api-token` or `partner-api-token` with the `x-auth-apikey` header, `api` or `partner-api` with `x-auth-apikey` plus a client certificate, `api-oauth-token` or `partner-api-oauth-token` with `x-auth-access-token`, and `federated-token` with `x-auth-ft`. A request with `Authorization: Bearer ` and no `x-auth-scheme` is treated as OAuth, and `federated-token` may also be sent as the `x-auth-scheme` and `x-auth-ft` query parameters. One of: `api-token`, `api`, `api-oauth-token`, `federated-token`, `partner-api-token`, `partner-api`, `partner-api-oauth-token`. - `x-auth-org` (header, string): Client organization UUID (22-character RUUID), for partner credentials only. With it the call runs in that client organization with the partner support authority's role. Without it a partner credential runs as the partner organization, which outside the partner endpoints is deprecated (responses carry `Deprecation` and `Sunset: Tue, 05 Jan 2027 00:00:00 GMT`). A malformed value returns 400 `INVALID_AUTH_ORG`; a client organization the partner cannot access returns 403 `PARTNER_CLIENT_ACCESS_DENIED`. ## Request body Content type: `application/json`. Request object for retrieving event seekpoints with various search criteria and filtering options. - `activitySet` (array | null): Set of activity types to filter seekpoints by - `componentSeekPointsByAccessControlledDoorWSRequest` (object): Component seekpoints search for access controlled door - `componentSeekPointsByAccessControlledDoorsWSRequest` (object): Component seekpoints search for access controlled doors - `componentSeekPointsByOwnerDeviceWSRequest` (object): Component seekpoints search for owner device - `durationSec` (integer | null): Duration in seconds for the search window - `searchColorAndVehicleByColorWSRequest` (object): Request object for searching clothing and vehicle events by color with time and device filtering. - `searchMotionGridWithActivitiesWSRequest` (object): Request object for searching motion grid data with activity information. - `seekpointsWSRequest` (object): General seekpoints search request parameters - `startTimeSec` (integer | null): Start time in seconds for the search window - `videoFootageWSRequest` (object): Request object for video footage search with camera selection and multi-camera options. ## Response 200 OK. Content type: `application/json` - `combinedSeekpoints` (array | null): List of combined seekpoints from various event sources - `error` (boolean | null) - `errorCode` (string | null): Stable, machine-readable code for the failure (one of the ApiErrorCode catalog) when error is true. Branch on this, not on errorMsg. - `errorMsg` (string | null) - `warningMsg` (string | null) ## Errors Also 400, 401, 403, 429, 500, 503 with the standard error body (`errorCode`, `errorMsg`): https://developer.rhombus.com/errors ## OpenAPI ````yaml openapi: 3.0.1 info: title: Rhombus API version: "1.0" servers: - description: Production Server url: https://api2.rhombussystems.com security: - ApiKeyAuth: [] paths: /api/eventSearch/getEventSeekpoints: post: deprecated: true description: Get normal seekpoint events and access control seekpoint events operationId: getDeprecatedEventSeekpoints parameters: - description: "Authentication scheme identifier. Use `api-token` or `partner-api-token` with the `x-auth-apikey` header, `api` or `partner-api` with `x-auth-apikey` plus a client certificate, `api-oauth-token` or `partner-api-oauth-token` with `x-auth-access-token`, and `federated-token` with `x-auth-ft`. A request with `Authorization: Bearer ` and no `x-auth-scheme` is treated as OAuth, and `federated-token` may also be sent as the `x-auth-scheme` and `x-auth-ft` query parameters." example: api-token in: header name: x-auth-scheme required: false schema: default: api-token enum: - api-token - api - api-oauth-token - federated-token - partner-api-token - partner-api - partner-api-oauth-token type: string - description: "Client organization UUID (22-character RUUID), for partner credentials only. With it the call runs in that client organization with the partner support authority's role. Without it a partner credential runs as the partner organization, which outside the partner endpoints is deprecated (responses carry `Deprecation` and `Sunset: Tue, 05 Jan 2027 00:00:00 GMT`). A malformed value returns 400 `INVALID_AUTH_ORG`; a client organization the partner cannot access returns 403 `PARTNER_CLIENT_ACCESS_DENIED`." in: header name: x-auth-org required: false schema: format: RUUID maxLength: 22 minLength: 22 type: string requestBody: content: application/json: schema: $ref: "#/components/schemas/Eventsearch_GetEventSeekpointsWSRequest" responses: "200": content: application/json: schema: $ref: "#/components/schemas/Eventsearch_GetEventSeekpointsWSResponse" description: OK "400": $ref: "#/components/responses/BadRequest" "401": $ref: "#/components/responses/Unauthorized" "403": $ref: "#/components/responses/Forbidden" "429": $ref: "#/components/responses/TooManyRequests" "500": $ref: "#/components/responses/InternalServerError" "503": $ref: "#/components/responses/ServiceUnavailable" security: - ApiKeyAuth: [] - oauth2: - read summary: Get normal seekpoint events and access control seekpoint events tags: - Event Search Webservice components: schemas: Eventsearch_GetEventSeekpointsWSRequest: description: Request object for retrieving event seekpoints with various search criteria and filtering options. properties: activitySet: description: Set of activity types to filter seekpoints by items: $ref: "#/components/schemas/ActivityEnum" nullable: true type: array uniqueItems: true componentSeekPointsByAccessControlledDoorWSRequest: $ref: "#/components/schemas/Component_FindComponentSeekPointsByAccessControlledDoorWSRequest" componentSeekPointsByAccessControlledDoorsWSRequest: $ref: "#/components/schemas/Component_FindComponentSeekPointsByAccessControlledDoorsWSRequest" componentSeekPointsByOwnerDeviceWSRequest: $ref: "#/components/schemas/Component_FindComponentSeekPointsByOwnerDeviceWSRequest" durationSec: description: Duration in seconds for the search window example: 3600 format: int32 nullable: true type: integer searchColorAndVehicleByColorWSRequest: $ref: "#/components/schemas/Eventsearch_SearchClothingAndVehicleByColorWSRequest" searchMotionGridWithActivitiesWSRequest: $ref: "#/components/schemas/Event_SearchMotionGridWithActivitiesWSRequest" seekpointsWSRequest: $ref: "#/components/schemas/Common_devices_GetSeekpointsWSRequest" startTimeSec: description: Start time in seconds for the search window example: 1640995200 format: int64 nullable: true type: integer videoFootageWSRequest: $ref: "#/components/schemas/Eventsearch_VideoFootageWSRequest" type: object ActivityEnum: enum: - SOUND_LOUD - SOUND_GUN_SHOT - TAMPER - VISUAL_TAMPER - MOTION_TAMPER - MOTION - MOTION_HUMAN - MOTION_CAR - MOTION_ANIMAL - MOTION_PACKAGE - PACKAGE_ARRIVED - PACKAGE_DEPARTED - FACE - FACE_IDENTIFIED - FACE_UNIDENTIFIED - FACE_BLACKLISTED - FACE_ALERT - POSE_ANOMALOUS - POSE_FALL - LICENSEPLATE - LICENSEPLATE_IDENTIFIED - LICENSEPLATE_UNIDENTIFIED - LICENSEPLATE_ALERT - LICENSEPLATE_BLACKLISTED - LICENSEPLATE_TRUSTED - PEOPLECOUNT_HIGH - PEOPLECOUNT_HIGH_RESET - PEOPLECOUNT_LOW - PEOPLECOUNT_LOW_RESET - HUMAN_ENTER - HUMAN_EXIT - CAR_ENTER - CAR_EXIT - TEMPERATURE_EXCEEDED_HIGH - TEMPERATURE_EXCEEDED_LOW - HUMIDITY_EXCEEDED_HIGH - HUMIDITY_EXCEEDED_LOW - PM25_EXCEEDED_HIGH - TVOC_EXCEEDED_HIGH - ETOH_EXCEEDED_HIGH - IAQ_EXCEEDED_HIGH - CO2_EXCEEDED_HIGH - CO2_EXCEEDED_LOW - PROBE_TEMPERATURE_EXCEEDED_HIGH - PROBE_TEMPERATURE_EXCEEDED_LOW - PROBE_DISCONNECTED - PROBE_CONNECTED - HEAT_INDEX_EXCEEDED_HIGH - PRESSURE_EXCEEDED_HIGH - PRESSURE_EXCEEDED_LOW - PM10_EXCEEDED_HIGH - PM40_EXCEEDED_HIGH - PM100_EXCEEDED_HIGH - VOC_IDX_EXCEEDED_HIGH - NOX_IDX_EXCEEDED_HIGH - FORMALDEHYDE_EXCEEDED_HIGH - CARBON_MONOXIDE_EXCEEDED_HIGH - AQI_EXCEEDED_HIGH - DOOR_AJAR - DOOR_OPENED - DOOR_CLOSED - BUTTON_SINGLE_PRESSED - BUTTON_DOUBLE_PRESSED - BUTTON_LONG_PRESSED - TAG_ARRIVED - TAG_DEPARTED - TAG_MOVED - TAG_POSITIONING_CHANGED - TAG_BOUNDARY_INGRESS - TAG_BOUNDARY_EGRESS - TAG_PANIC - BADGE_AUTHORIZED - BADGE_UNAUTHORIZED - BADGE_UNAUTHORIZED_V2 - BADGE_AJAR - BADGE_MANUAL - BADGE_FORCED_OPEN - BADGE_LOCKDOWN - BADGE_REQUEST_TO_EXIT - BADGE_DURESS - BADGE_SECURITY_BREACH - BADGE_TAMPER - BADGE_FACE_MISMATCH - POS_ORDER - GUN_DETECT_EVENT - IOT_SOUND_AGGRESSION - IOT_SOUND_HELP - IOT_AIR_CO - IOT_AIR_CO2 - IOT_AIR_MASKING - IOT_AIR_THC - IOT_AIR_VAPE - IOT_AIR_VOC - IOT_AIR_TEMP - IOT_TAMPER - IOT_GUNSHOT - IOT_BUTTON_SINGLE_CLICK - IOT_BUTTON_DOUBLE_CLICK - IOT_BUTTON_HOLD - IOT_PANIC_BUTTON_TRIGGERED - AUDIO_SOUND_SIGNIFICANT - AUDIO_SOUND_LOUD - AUDIO_SOUND_ABUSIVE - AUDIO_SOUND_GREETING - AUDIO_SOUND_HELP - AUDIO_SOUND_GUN - AUDIO_SOUND_GLASS_BREAK - AUDIO_SOUND_ALARM_SMOKE_FIRE - AUDIO_SOUND_ALARM_CARBON_MONOXIDE - AUDIO_SOUND_SIREN - CLIMATE_VOC - CLIMATE_VAPE - CLIMATE_SMOKE - CLIMATE_THC - CLIMATE_CO2 - CLIMATE_ETOH - CLIMATE_PM25 - CLIMATE_IAQ - CLIMATE_LEAK - SOUND_AGGRESSION - SOUND_HELP - AIR_CO - AIR_CO2 - AIR_MASKING - AIR_THC - AIR_VAPE - AIR_VOC - MASK_MISSING - HELMET_MISSING - GLOVES_MISSING - PIR_OCCUPIED - PIR_MOVEMENT - PIR_VACANT - CUSTOM - VISITOR_ARRIVED - VISITOR_DEPARTED - AC_DR_CONNECTED - AC_DR_DISCONNECTED - AC_DPI_DOOR_OPEN - AC_DPI_DOOR_CLOSED - AC_DPI_DOOR_AJAR - AC_DPI_DOOR_FORCED_OPEN - AC_DSR_UNLOCKED - AC_DSR_LOCKED - AC_DB_TRIGGERED - AC_PANIC_BUTTON_TRIGGERED - AC_REMOTE_UNLOCK - AC_BADGE_AUTHORIZED - AC_BADGE_UNAUTHORIZED - AC_BADGE_FACE_MISMATCH - AC_LOCKDOWN_ACTIVATED - AC_LOCKDOWN_DEACTIVATED - AC_LOCKDOWN_PLAN_SWITCHED - AC_TAMPER_PROX - AC_TAMPER_ACCEL - AC_TAMPER_SWITCH - AC_GR_ACTIVE - AC_GR_INACTIVE - AC_GI_ACTIVE - AC_GI_INACTIVE - AC_REX_ACTIVE - AC_REX_INACTIVE - AC_APERIO_DEVICE_DISCONNECTED - AC_APERIO_DEVICE_CONNECTED - AC_APERIO_DEVICE_REBOOT - AC_APERIO_DEVICE_TAMPER - AC_APERIO_LOW_BATTERY - AC_APERIO_FLAT_BATTERY - AC_APERIO_OK_BATTERY - AC_SCHLAGE_GW_DISCONNECTED - AC_SCHLAGE_GW_CONNECTED - AC_SCHLAGE_APM_DISCONNECTED - AC_SCHLAGE_APM_CONNECTED - AC_SCHLAGE_LOW_BATTERY - AC_SCHLAGE_CRITICAL_BATTERY - AC_SCHLAGE_OK_BATTERY - POWER_SWITCH_BATTERY - POWER_SWITCH_PRIMARY - AI_SEARCH_MATCH - AI_SEARCH_MATCH_PERSON_SMOKING - AI_SEARCH_MATCH_PERSON_ON_PHONE - AI_SEARCH_MATCH_PERSON_FALLING - CUSTOM_LLM_BOOLEAN_TRUE - CUSTOM_LLM_BOOLEAN_FALSE - CUSTOM_LLM_THRESHOLD_EXCEEDED_LOW - CUSTOM_LLM_THRESHOLD_EXCEEDED_HIGH - ALM_AUTHORITIES_CONTACTED - ALM_MONITORING_ENABLED - ALM_MONITORING_DISABLED - ALM_MONITORING_SETTINGS_CHANGE - ALM_THREAT_CASE_CLOSED - ALM_THREAT_DETECTED - ALM_MONITORING_EVENT_DETECTED - ROBOT_DOG_DETECTED - ROBOT_ARRIVED_AT_WAYPOINT - ROBOT_ARRIVED_AT_POSE - ROBOT_WAITING_AT_POSE - ROBOT_MANUAL_CMD_VEL - ROBOT_MANUAL_ACTION - ROBOT_MANUAL_POSTURE - ROBOT_NAVIGATE_TO_POSE_START - ROBOT_NAVIGATE_TO_POSE_END - ROBOT_NAVIGATE_TO_HOME_START - ROBOT_NAVIGATE_TO_HOME_END - ROBOT_NAVIGATE_TO_WAYPOINT_START - ROBOT_NAVIGATE_TO_WAYPOINT_END - ROBOT_ROUTE_RUN_START - ROBOT_ROUTE_RUN_END - ROBOT_LOW_BATTERY_DOCKING - ROBOT_IDLE_DOCKING - ROBOT_EMERGENCY - LOITER_HUMAN - INACTIVITY_HUMAN - INACTIVITY_CAR - GROUP_ENTRY - ONGUARD_BADGE_AUTHORIZED - ONGUARD_BADGE_ANOMALY - ONGUARD_NO_ENTRY_MADE - ELEMENTS_BADGE_AUTHORIZED - ELEMENTS_BADGE_ANOMALY - ELEMENTS_NO_ENTRY_MADE - NETBOX_BADGE_AUTHORIZED - NETBOX_BADGE_ANOMALY - NETBOX_NO_ENTRY_MADE - THERMAL_TEMPERATURE_ALARM - THERMAL_TEMPERATURE_WARNING - THERMAL_FIRE_DETECTED - THERMAL_SMOKING_DETECTED - THERMAL_FIRE_VERIFIED - THERMAL_HEAT_NO_THREAT - THERMAL_VISUAL_HOTSPOT - THERMAL_VISUAL_HEAT_RISE - THERMAL_VISUAL_WARM_BODY - UNKNOWN type: string Component_FindComponentSeekPointsByAccessControlledDoorWSRequest: description: Component seekpoints search for access controlled door properties: accessControlledDoorUuid: description: base 64 (url-safe) uuid string example: AAAAAAAAAAAAAAAAAAAAAA format: RUUID nullable: true type: string durationSec: format: int32 nullable: true type: integer startTimeSecEpochExclusive: format: int64 nullable: true type: integer type: object Component_FindComponentSeekPointsByAccessControlledDoorsWSRequest: description: Component seekpoints search for access controlled doors properties: accessControlledDoorUuidList: items: description: base 64 (url-safe) uuid string example: AAAAAAAAAAAAAAAAAAAAAA format: RUUID nullable: true type: string nullable: true type: array durationSec: format: int32 nullable: true type: integer sortResponse: nullable: true type: boolean startTimeSecEpochExclusive: format: int64 nullable: true type: integer type: object Component_FindComponentSeekPointsByOwnerDeviceWSRequest: description: Component seekpoints search for owner device properties: durationSec: format: int32 nullable: true type: integer ownerDeviceUuid: description: base 64 (url-safe) uuid string example: AAAAAAAAAAAAAAAAAAAAAA format: RUUID nullable: true type: string startTimeSecEpochExclusive: format: int64 nullable: true type: integer type: object Eventsearch_SearchClothingAndVehicleByColorWSRequest: description: Request object for searching clothing and vehicle events by color with time and device filtering. properties: clothingColorFilter: description: Set of clothing colors to filter the search by items: $ref: "#/components/schemas/ColorEnum" nullable: true type: array uniqueItems: true deviceFilter: description: List of device UUIDs to filter the search by items: description: RUUID with optional appended facet information example: AAAAAAAAAAAAAAAAAAAAAA.v0 format: DeviceFacetUuid nullable: true type: string nullable: true type: array endTimeMs: description: End time in milliseconds for the search window example: 1641081600000 format: int64 nullable: true type: integer startTimeMs: description: Start time in milliseconds for the search window example: 1640995200000 format: int64 nullable: true type: integer vehicleColorFilter: description: Set of vehicle colors to filter the search by items: $ref: "#/components/schemas/ColorEnum" nullable: true type: array uniqueItems: true type: object ColorEnum: description: Set of colors to filter by enum: - BLACK - BLUE - BROWN - GRAYWHITE - GREEN - ORANGE - PINK - PURPLE - RED - YELLOW - UNKNOWN type: string Event_SearchMotionGridWithActivitiesWSRequest: description: Request object for searching motion grid data with activity information. properties: deviceUuid: description: RUUID with optional appended facet information example: AAAAAAAAAAAAAAAAAAAAAA.v0 format: DeviceFacetUuid nullable: true type: string endTimeUtcSecs: description: End time as a UNIX timestamp in seconds example: 1641081600 format: int64 nullable: true type: integer searchCells: description: List of motion grid cells to include in the search items: $ref: "#/components/schemas/Event_FrontendCell" nullable: true type: array startTimeUtcSecs: description: Start time as a UNIX timestamp in seconds example: 1640995200 format: int64 nullable: true type: integer required: - deviceUuid - endTimeUtcSecs - searchCells - startTimeUtcSecs type: object Event_FrontendCell: description: Represents a cell in the motion grid with column and row coordinates. properties: col: description: Column coordinate of the cell example: 5 format: int32 nullable: true type: integer row: description: Row coordinate of the cell example: 3 format: int32 nullable: true type: integer type: object Common_devices_GetSeekpointsWSRequest: description: General seekpoints search request parameters properties: deviceUuid: description: RUUID with optional appended facet information example: AAAAAAAAAAAAAAAAAAAAAA.v0 format: DeviceFacetUuid nullable: true type: string durationSecs: format: int32 nullable: true type: integer includeAnyMotion: nullable: true type: boolean startTimeSec: format: int64 nullable: true type: integer type: object Eventsearch_VideoFootageWSRequest: description: Request object for video footage search with camera selection and multi-camera options. properties: cameraUuid: description: RUUID with optional appended facet information example: AAAAAAAAAAAAAAAAAAAAAA.v0 format: DeviceFacetUuid nullable: true type: string cameraUuids: description: List of camera UUIDs to search for video footage items: description: RUUID with optional appended facet information example: AAAAAAAAAAAAAAAAAAAAAA.v0 format: DeviceFacetUuid nullable: true type: string nullable: true type: array duration: description: Duration in seconds example: 3600 format: int32 nullable: true type: integer includeAnyMotion: description: Whether to include any motion events example: true nullable: true type: boolean startTime: description: Start time in seconds since epoch example: 1640995200 format: int64 nullable: true type: integer useMultiCamera: description: Whether to use multi-camera search functionality example: true nullable: true type: boolean type: object Eventsearch_GetEventSeekpointsWSResponse: description: Response object containing combined seekpoints from various event sources. properties: combinedSeekpoints: description: List of combined seekpoints from various event sources items: $ref: "#/components/schemas/Eventsearch_CombinedSeekPointType" nullable: true type: array error: nullable: true type: boolean errorCode: description: Stable, machine-readable code for the failure (one of the ApiErrorCode catalog) when error is true. Branch on this, not on errorMsg. nullable: true type: string errorMsg: nullable: true type: string warningMsg: nullable: true type: string type: object Eventsearch_CombinedSeekPointType: description: Combined seekpoint type containing information from various event sources including timestamps, activities, and metadata. properties: activity: $ref: "#/components/schemas/ActivityEnum" cameraUuid: description: RUUID with optional appended facet information example: AAAAAAAAAAAAAAAAAAAAAA.v0 format: DeviceFacetUuid nullable: true type: string cardholderName: description: Cardholder (badge holder) name for OnGuard integration seekpoints example: Jane Doe nullable: true type: string customActivityColor: $ref: "#/components/schemas/FootageSeekPointColorEnum" customActivityDescription: description: Custom description for the activity example: A person was detected in the camera view nullable: true type: string customActivityDisplayName: description: Custom display name for the activity example: Person Detected nullable: true type: string dwelling: description: Whether the detected person is dwelling/loitering nullable: true type: boolean faceName: description: Name of the face detected in this seekpoint example: John Doe nullable: true type: string licensePlate: description: License plate detected in this seekpoint example: ABC123 nullable: true type: string objectId: description: Object ID for tracking purposes example: 12345 format: int32 nullable: true type: integer originalEvent: description: Original event object that generated this seekpoint nullable: true type: object regionMatchTimestampMs: description: Timestamp in milliseconds of the earliest motion evidence inside the searched region for this seekpoint. Only populated when the request includes searchCells and this seekpoint matched the region. May trail timestampMs, which reflects the start of the underlying motion event rather than when the region was entered. example: 1640995215000 format: int64 nullable: true type: integer seekpointEndTimeMs: description: End time in milliseconds for the seekpoint duration example: 1640995300000 format: int64 nullable: true type: integer seekpointStartTimeMs: description: Start time in milliseconds for the seekpoint duration example: 1640995200000 format: int64 nullable: true type: integer stableTrackId: description: Stable track ID for re-identification across track segments example: 42 format: int32 nullable: true type: integer thumbnailUrl: description: URL to the thumbnail image for this seekpoint example: https://example.com/thumbnail.jpg nullable: true type: string timestampMs: description: Timestamp in milliseconds when the seekpoint occurred example: 1640995200000 format: int64 nullable: true type: integer unidentifiedFaceId: description: ID for unidentified faces example: face_12345 nullable: true type: string type: object FootageSeekPointColorEnum: enum: - BLUE - RED - PURPLE - TAN - ORANGE - TEAL - GRAY - BLACK type: string securitySchemes: ApiKeyAuth: description: Your Rhombus API key. Must be accompanied by the `x-auth-scheme` header set to `api-token` (or `partner-api-token` for partner endpoints). in: header name: x-auth-apikey type: apiKey oauth2: description: 'OAuth 2.0 authorization code flow with PKCE (`S256`). Send the access token as `Authorization: Bearer `. Each operation lists the scopes it requires; a token without them is refused 403 with `WWW-Authenticate: Bearer error="insufficient_scope"`.' flows: authorizationCode: authorizationUrl: https://console.rhombus.com/oauth/authorize refreshUrl: https://auth-web.rhombussystems.com/oauth/token scopes: physical: Unlock doors and elevators, lockdown, alarms, speakers and robots read: View cameras, footage and settings write: Change settings and data tokenUrl: https://auth-web.rhombussystems.com/oauth/token type: oauth2 ````