# Authentication
Using your **clientKey** and **clientSecret** you can request for a **token** by calling the dedicated method (note: replace asterisks with your clientKey and clinetSecret)
{% tabs %}
{% tab title="curl" %}
```shell
/curl -X POST \
https://explore.cloud4wi.com/v1/sts/login/services \
-H 'Cache-Control: no-cache' \
-H 'Content-Type: application/json' \
-H 'accept: application/json' \
-d '{
"clientKey":"ck-********-****-****-****-************",
"clientSecret":"********************************"
}'/curl -X POST \
```
{% endtab %}
{% endtabs %}
If the client key and secret are correct, then the API will return a JWT token.
```json
{"token":[[JWT_TOKEN]]"}
```
{% tabs %}
{% tab title="curl" %}
```shell
curl -X GET \
'https://explore.cloud4wi.com/v2/customers/organizations/[[CID]]?sortBy=created_absolute&sortReverse=false' \
-H 'Authorization: Bearer [[JWT_TOKEN]]' \
-H 'Cache-Control: no-cache' \
-H 'accept: application/json'
```
{% endtab %}
{% endtabs %}
The JWT token expires after **one day**; to get a new one, restart and call again /v1/sts/login/services.
### AuthN/AuthZ Flow
## Endpoints
Use your **client key** and **client secret** to retrieve a valid authentication **token**
{% openapi src="" path="/v1/sts/login/services" method="post" %}
{% endopenapi %}
You can manually revoke a token using the following end-point:
{% openapi src="" path="/v1/sts/logout" method="post" %}
{% endopenapi %}