Use and renew the bearer token

Include the bearer token in theAuthorization header for all API requests:

Authorization: Bearer {access_token}

Bearer tokens expire after the time indicated in theexpires_in property of the token response (value in seconds). Your integration must implement automatic token renewal before the current token expires to prevent authentication failures.

Example token response

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI...",
  "expires_in": 3600,
  "token_type": "Bearer",
  "scope": "avatax_api"
}

In this example, the token expires in 3,600 seconds (1 hour). Refresh the token before it expires.

Note

Token expiration and refresh behavior follow OAuth 2.0 client credentials grant standards.
If you encounter issues generating tokens or accessing endpoints, contact Avalara Developer Support.