POST https://nw-flow.cloud/oauth/token

Response
200 OK
IP
5.50.56.159
Profiled on
Token
ffcc4f

TokenController :: token

Request

GET Parameters

No GET parameters

POST Parameters

Key Value
client_id 
"59d9fe08dddbc916"
client_secret 
"9d55d38105672e0df5e0ff2ffc1fbaab8e0bdd25174bef4b78e764d6f7bbbdf7"
grant_type 
"client_credentials"
scope 
"device:runtime"

Uploaded Files

No uploaded files

Request Attributes

Key Value
_api_call_log_data 
[
  "method" => "POST"
  "path" => "/oauth/token"
  "statusCode" => 200
  "callerType" => App\Enum\ApiCallerType {#1536
    +name: "ANONYMOUS"
    +value: "anonymous"
  }
  "userId" => null
  "deviceId" => null
  "clientId" => null
  "scopes" => null
  "ipAddress" => "5.50.56.159"
  "userAgent" => "ktor-client"
  "requestBody" => "grant_type=client_credentials&client_id=59d9fe08dddbc916&client_secret=%2A%2A%2A&scope=device%3Aruntime"
  "responseBody" => "{"token_type":"Bearer","expires_in":900,"access_token":"***"}"
  "durationMs" => 287
]
_controller 
"App\OAuth\Controller\TokenController::token"
_controller_attributes 
[
  Symfony\Component\Routing\Attribute\Route {#476
    +methods: [
      "POST"
    ]
    +envs: []
    +schemes: []
    +aliases: []
    +path: "/oauth/token"
    +name: "oauth_token"
    +requirements: []
    +options: []
    +defaults: []
    +host: null
    +condition: null
    +priority: null
  }
]
_firewall_context 
"security.firewall.map.context.oauth_token"
_route 
"oauth_token"
_route_params 
[]
_stopwatch_token 
"ebe36a"

Request Headers

Header Value
accept 
"application/json"
accept-encoding 
"gzip"
authorization 
"Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiI1OWQ5ZmUwOGRkZGJjOTE2IiwianRpIjoiZmExZTMxMDg1NzE1YWRmYzkxNjc5OTY0MDBjOGVlODAwZWEwZTNiM2M3ZDliMjM0ZDZiZWRjMThlNjYyZTEzZjVjMmEzMzI4MGI1YzFlMGIiLCJpYXQiOjE3ODkwODU1MTYuODEwODgzLCJuYmYiOjE3ODkwODU1MTYuODEwODg5LCJleHAiOjE3ODkwODY0MTYuODAxMTU3LCJzdWIiOiI1OWQ5ZmUwOGRkZGJjOTE2Iiwic2NvcGVzIjpbImRldmljZTpydW50aW1lIl19.W0D04VCiloguteFh0ipglZPMbX-aPk4cbc6Gj78z0PKgcwoSkwmM8pRna9nW22aRQdqO2Jx0FXCGbAgGvnuMK_oM_MoFgvHO9kP79HODf5Zm_o-eZBftlr0toZ1nVHjUXQy1UUdbYn31OZaUsfwoUtnBd0-fNdq2mvIMFvHOyEYMEUenuXecprmNXRkBZ0fB6Z9uoubf8EYm1FzJE1vpwWVPHCBj5XR18Zh6Y0YKbtDftpRoDIqDbRMNbmuaMy57WVOiMrsPJeKCqv3S8dGPVznZC7_Bx_PBtBDqG37zRhphs37iAIL2euDC1iuRbxm_TzGYxTU70_-gubECM7UNkA"
content-length 
"158"
content-type 
"application/x-www-form-urlencoded; charset=UTF-8"
host 
"nw-flow.cloud"
user-agent 
"ktor-client"
x-php-ob-level 
"1"

Request Content

Raw

grant_type=client_credentials&client_id=59d9fe08dddbc916&client_secret=9d55d38105672e0df5e0ff2ffc1fbaab8e0bdd25174bef4b78e764d6f7bbbdf7&scope=device%3Aruntime

Retry Command

curl \
  --compressed \
  --request POST \
  --url 'https://nw-flow.cloud/oauth/token' \
  --header 'Content-Length: 158' \
  --header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiI1OWQ5ZmUwOGRkZGJjOTE2IiwianRpIjoiZmExZTMxMDg1NzE1YWRmYzkxNjc5OTY0MDBjOGVlODAwZWEwZTNiM2M3ZDliMjM0ZDZiZWRjMThlNjYyZTEzZjVjMmEzMzI4MGI1YzFlMGIiLCJpYXQiOjE3ODkwODU1MTYuODEwODgzLCJuYmYiOjE3ODkwODU1MTYuODEwODg5LCJleHAiOjE3ODkwODY0MTYuODAxMTU3LCJzdWIiOiI1OWQ5ZmUwOGRkZGJjOTE2Iiwic2NvcGVzIjpbImRldmljZTpydW50aW1lIl19.W0D04VCiloguteFh0ipglZPMbX-aPk4cbc6Gj78z0PKgcwoSkwmM8pRna9nW22aRQdqO2Jx0FXCGbAgGvnuMK_oM_MoFgvHO9kP79HODf5Zm_o-eZBftlr0toZ1nVHjUXQy1UUdbYn31OZaUsfwoUtnBd0-fNdq2mvIMFvHOyEYMEUenuXecprmNXRkBZ0fB6Z9uoubf8EYm1FzJE1vpwWVPHCBj5XR18Zh6Y0YKbtDftpRoDIqDbRMNbmuaMy57WVOiMrsPJeKCqv3S8dGPVznZC7_Bx_PBtBDqG37zRhphs37iAIL2euDC1iuRbxm_TzGYxTU70_-gubECM7UNkA' \
  --header 'Accept: application/json' \
  --header 'User-Agent: ktor-client' \
  --header 'Content-Type: application/x-www-form-urlencoded; charset=UTF-8' \
  --header 'Accept-Encoding: gzip' \
  --header 'X-Php-Ob-Level: 1' \
  --data-raw 'grant_type=client_credentials&client_id=59d9fe08dddbc916&client_secret=9d55d38105672e0df5e0ff2ffc1fbaab8e0bdd25174bef4b78e764d6f7bbbdf7&scope=device%3Aruntime'

Response

Response Headers

Header Value
cache-control 
"no-store, private"
content-type 
"application/json; charset=UTF-8"
date 
"Fri, 11 Sep 2026 00:32:09 GMT"
permissions-policy 
"camera=(), microphone=(), geolocation=()"
pragma 
"no-cache"
referrer-policy 
"strict-origin-when-cross-origin"
x-content-type-options 
"nosniff"
x-debug-token 
"ffcc4f"
x-frame-options 
"DENY"
x-robots-tag 
"noindex"
x-xss-protection 
"0"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
ACCOUNT_LOCKOUT_DURATION 
"900"
ACCOUNT_LOCKOUT_THRESHOLD 
"5"
AGE_MIN 
"26"
AGE_VERIFICATION_REQUIRED 
"false"
AGE_VERIFICATION_TTL 
"900"
API_CALL_LOG_ENABLED 
"true"
APP_SECRET 
"33b1df71599bdd162645e641ae741a10"
APP_SHARE_DIR 
"var/share"
CORS_ALLOW_ORIGIN 
"^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$"
EMAIL_VERIFICATION_TTL 
"86400"
FIREBASE_CREDENTIALS 
"/app/config/firebase/neow.json"
JWT_PASSPHRASE 
"f13c90c3c37d9982d9b90785020246638afb30ed5928df19d6882c1af6e3448b"
JWT_PUBLIC_KEY 
"%kernel.project_dir%/config/jwt/public.pem"
JWT_SECRET_KEY 
"%kernel.project_dir%/config/jwt/private.pem"
JWT_TOKEN_TTL 
"900"
LOCATION_REQUEST_TTL 
"300"
MAILER_DSN 
"smtp://Neow%20Flow:md-f2npYQTwJJp6Mc5LpmYB6A@smtp.mandrillapp.com:587"
MAILER_FROM 
"flow@neow-kids.com"
MFA_CODE_TTL 
"600"
MFA_MAX_ATTEMPTS 
"3"
MFA_RESEND_COOLDOWN 
"60"
OAUTH_ACCESS_TOKEN_TTL 
"900"
OAUTH_ENCRYPTION_KEY 
"def00000aef5ee1e0c8c881a739b35960dd3992587c190e459b3b576b4a642cb0e999c97e0f66638623993e8d81c149091344338002c0825411232aaea7c769071231fcd"
OAUTH_REFRESH_TOKEN_TTL 
"604800"
PAIRING_CODE_TTL 
"300"
SERPAPI_BURST_LIMIT 
"10000"
SERPAPI_KEY 
"ff3bb4bcd2dd104b9bdc753ad80d89b0c839b48e063ff7a16479e80d7381363d"
SERPAPI_RATE_AMOUNT 
"2"
SERPAPI_RATE_INTERVAL 
"1 second"
YOTI_API_KEY 
"DhQkDKTqnJDQdXU7xsnXyAo3IMwLbckp6QUHp8nnRf_ETI36LyuNNQr7u90="
YOTI_AVS_API_URL 
"https://age.yoti.com/api/v1"
YOTI_CALLBACK_URL 
"neow://yoti/callback"
YOTI_CLIENT_SDK_ID 
"37b70c3d-34fc-45d9-b881-a8efd8931dc6"
YOTI_DOC_SCAN_API_URL 
"https://api.yoti.com/idverify/v1"
YOTI_KEY_FILE_PATH 
"%kernel.project_dir%/config/yoti/NeowMobileApp-access-security.pem"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
APP_ENV 
"dev"
APP_PROJECT_DIR 
"/app"
APP_RUNTIME 
"Symfony\Component\Runtime\SymfonyRuntime"
APP_RUNTIME_OPTIONS 
[
  "project_dir" => "/app"
]
AUTH_TYPE 
""
COMPOSER_ALLOW_SUPERUSER 
"1"
CONTENT_LENGTH 
"158"
CONTENT_TYPE 
"application/x-www-form-urlencoded; charset=UTF-8"
DATABASE_URL 
"postgresql://app:!ChangeMe!@database:5432/app?serverVersion=16&charset=utf8"
DEFAULT_URI 
"https://nw-flow.cloud"
DOCUMENT_ROOT 
"/app/public"
DOCUMENT_URI 
"index.php"
FRANKENPHP_HOT_RELOAD 
"/.well-known/mercure?topic=https%3A%2F%2Ffrankenphp.dev%2Fhot-reload%2F4a8e8f07a5e44839"
FRANKENPHP_SITE_CONFIG 
"hot_reload"
FRANKENPHP_WORKER_CONFIG 
"watch"
GATEWAY_INTERFACE 
"CGI/1.1"
GODEBUG 
"cgocheck=0"
GPG_KEYS 
"1198C0117593497A5EC5C199286AF1F9897469DC 49D9AF6BC72A80D6691719C8AA23F5BE9C7097D4 D95C03BC702BE9515344AE3374E44BC9067701A5"
HOME 
"/root"
HOSTNAME 
"577d161ec860"
HTTPS 
"on"
HTTP_ACCEPT 
"application/json"
HTTP_ACCEPT_ENCODING 
"gzip"
HTTP_AUTHORIZATION 
"Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiI1OWQ5ZmUwOGRkZGJjOTE2IiwianRpIjoiZmExZTMxMDg1NzE1YWRmYzkxNjc5OTY0MDBjOGVlODAwZWEwZTNiM2M3ZDliMjM0ZDZiZWRjMThlNjYyZTEzZjVjMmEzMzI4MGI1YzFlMGIiLCJpYXQiOjE3ODkwODU1MTYuODEwODgzLCJuYmYiOjE3ODkwODU1MTYuODEwODg5LCJleHAiOjE3ODkwODY0MTYuODAxMTU3LCJzdWIiOiI1OWQ5ZmUwOGRkZGJjOTE2Iiwic2NvcGVzIjpbImRldmljZTpydW50aW1lIl19.W0D04VCiloguteFh0ipglZPMbX-aPk4cbc6Gj78z0PKgcwoSkwmM8pRna9nW22aRQdqO2Jx0FXCGbAgGvnuMK_oM_MoFgvHO9kP79HODf5Zm_o-eZBftlr0toZ1nVHjUXQy1UUdbYn31OZaUsfwoUtnBd0-fNdq2mvIMFvHOyEYMEUenuXecprmNXRkBZ0fB6Z9uoubf8EYm1FzJE1vpwWVPHCBj5XR18Zh6Y0YKbtDftpRoDIqDbRMNbmuaMy57WVOiMrsPJeKCqv3S8dGPVznZC7_Bx_PBtBDqG37zRhphs37iAIL2euDC1iuRbxm_TzGYxTU70_-gubECM7UNkA"
HTTP_CONTENT_LENGTH 
"158"
HTTP_CONTENT_TYPE 
"application/x-www-form-urlencoded; charset=UTF-8"
HTTP_HOST 
"nw-flow.cloud"
HTTP_USER_AGENT 
"ktor-client"
MERCURE_EXTRA_DIRECTIVES 
"demo"
MERCURE_JWT_SECRET 
"!ChangeThisMercureHubJWTSecretKey!"
MERCURE_PUBLIC_URL 
"https://localhost:443/.well-known/mercure"
MERCURE_PUBLISHER_JWT_KEY 
"!ChangeThisMercureHubJWTSecretKey!"
MERCURE_SUBSCRIBER_JWT_KEY 
"!ChangeThisMercureHubJWTSecretKey!"
MERCURE_URL 
"http://php/.well-known/mercure"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PATH_INFO 
""
PHPIZE_DEPS 
"autoconf \t\tdpkg-dev \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkg-config \t\tre2c"
PHP_ASC_URL 
"https://www.php.net/distributions/php-8.5.9.tar.xz.asc"
PHP_CFLAGS 
"-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"
PHP_CPPFLAGS 
"-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"
PHP_INI_DIR 
"/usr/local/etc/php"
PHP_INI_SCAN_DIR 
":/usr/local/etc/php/app.conf.d"
PHP_LDFLAGS 
"-Wl,-O1 -pie"
PHP_SELF 
"/index.php"
PHP_SHA256 
"0db7855f25bcd0ab1d592cdb35e284d6f6a5d2ae0f6f621122e364cc39b708f4"
PHP_URL 
"https://www.php.net/distributions/php-8.5.9.tar.xz"
PHP_VERSION 
"8.5.9"
PWD 
"/app"
QUERY_STRING 
""
REMOTE_ADDR 
"5.50.56.159"
REMOTE_HOST 
"5.50.56.159"
REMOTE_IDENT 
""
REMOTE_PORT 
"37122"
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1789086729
REQUEST_TIME_FLOAT 
1789086729.305
REQUEST_URI 
"/oauth/token"
SCRIPT_FILENAME 
"/app/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_NAME 
"nw-flow.cloud"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/2.0"
SERVER_SOFTWARE 
"FrankenPHP"
SSL_CIPHER 
"TLS_AES_128_GCM_SHA256"
SSL_PROTOCOL 
"TLSv1.3"
SYMFONY_DOTENV_PATH 
"/app/.env"
SYMFONY_DOTENV_VARS 
"APP_SECRET,APP_SHARE_DIR,CORS_ALLOW_ORIGIN,MAILER_DSN,MAILER_FROM,JWT_SECRET_KEY,JWT_PUBLIC_KEY,JWT_PASSPHRASE,JWT_TOKEN_TTL,ACCOUNT_LOCKOUT_THRESHOLD,ACCOUNT_LOCKOUT_DURATION,EMAIL_VERIFICATION_TTL,PAIRING_CODE_TTL,MFA_CODE_TTL,MFA_MAX_ATTEMPTS,MFA_RESEND_COOLDOWN,API_CALL_LOG_ENABLED,FIREBASE_CREDENTIALS,LOCATION_REQUEST_TTL,SERPAPI_KEY,SERPAPI_BURST_LIMIT,SERPAPI_RATE_INTERVAL,SERPAPI_RATE_AMOUNT,OAUTH_ACCESS_TOKEN_TTL,OAUTH_REFRESH_TOKEN_TTL,OAUTH_ENCRYPTION_KEY,YOTI_CLIENT_SDK_ID,YOTI_API_KEY,YOTI_AVS_API_URL,YOTI_CALLBACK_URL,AGE_MIN,AGE_VERIFICATION_TTL,AGE_VERIFICATION_REQUIRED,YOTI_KEY_FILE_PATH,YOTI_DOC_SCAN_API_URL"
TERM 
"xterm"
TLS_DIRECTIVE 
""
XDEBUG_MODE 
"develop"
XDG_CONFIG_HOME 
"/config"
XDG_DATA_HOME 
"/data"