Use and renew the bearer token

Include the bearer token in the Authorization header for all API requests:

Authorization: Bearer {access_token}

Bearer tokens expire after the time indicated in the expires_in property of the token response (value in seconds). Your integration must implement automatic token renewal before the current token expires to prevent authentication failures.

Example token response

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI...",
  "expires_in": 3600,
  "token_type": "Bearer",
  "scope": "avatax_api iam-ds"
}

In this example, the token expires in 3,600 seconds (1 hour). Refresh the token before it expires.

Note

Token expiration and refresh behavior follows OAuth 2.0 client credentials grant standards.
If you encounter issues generating tokens or accessing endpoints, contact Avalara Developer Support.