---
title: Authentication | Engage2Reward™ Gift Card API | GiftCard Partners
description: "Learn the two-step authentication flow: create a Bearer token using Email + AccessToken, then use Authorization: Bearer for all requests."
---

Authentication

Getting Started

- [Introduction](https://developers.giftcardpartners.com/docs/introduction?hsLang=en)
- [Quickstart](https://developers.giftcardpartners.com/docs/quickstart?hsLang=en)
- [Authentication](https://developers.giftcardpartners.com/docs/authentication?hsLang=en)
- [Sandbox / Stage](https://developers.giftcardpartners.com/docs/sandbox?hsLang=en)

Core Guides

- [Products](https://developers.giftcardpartners.com/docs/products?hsLang=en)
- [Orders](https://developers.giftcardpartners.com/docs/orders?hsLang=en)
- [Delivery Types](https://developers.giftcardpartners.com/docs/delivery-types?hsLang=en)
- [Webhooks](https://developers.giftcardpartners.com/docs/webhooks?hsLang=en)
- [Error Handling](https://developers.giftcardpartners.com/docs/error-handling?hsLang=en)
- [Product Field Glossary](https://developers.giftcardpartners.com/docs/product-field-glossary?hsLang=en)

More

- [Resources](https://developers.giftcardpartners.com/docs/developer-resources?hsLang=en)
- [Use Cases](https://developers.giftcardpartners.com/use-cases?hsLang=en)
- [API Reference](https://developers.giftcardpartners.com/reference?hsLang=en)

Create a Bearer token using your Email and AccessToken, then use it to authenticate all other API requests.

 

Engage2Reward™ Gift Card API uses a simple two-step authentication flow. First, exchange your credentials for a token. Then send that token in the `Authorization` header for all subsequent requests.

## Step 1: Create a token

Make a request to the Tokens endpoint using your `Email` and `AccessToken` headers.

POST `/v1/Tokens`

cURL

Copy

```
curl -X POST "BASE_URL/v1/Tokens" \
  -H "Email: EMAIL" \
  -H "AccessToken: ACCESS_TOKEN"
```

## Token response

The response includes a token value and an expiration period.

JSON

Copy

```
{
  "Value": "eyJhbGciOi...",
  "ExpiresIn": 3600
}
```

## Step 2: Use the Bearer token

Include the token in the `Authorization` header for all authenticated requests.

HTTP Header

Copy

```
Authorization: Bearer YOUR_TOKEN
```

**Tip:** Reuse the same Bearer token until it expires instead of requesting a new one for every API call.

## Common issues

- **401 Unauthorized:** Missing or invalid Bearer token
- **403 Forbidden:** API access disabled for the credential set
- **504 Timeout:** Retry the request safely

## What’s next

- [Quickstart](https://developers.giftcardpartners.com/docs/quickstart?hsLang=en)
- [Products](https://developers.giftcardpartners.com/docs/products?hsLang=en)
- [API Reference](https://developers.giftcardpartners.com/reference?hsLang=en)