Auth: obtain access token from  app credentials

Is this acceptable?