You can use this example as a call from code, or through a REST client such as Postman:
POST https://YOURSITE.com/rest/v10/oauth2/token
{
"grant_type":"password",
"client_id":"sugar",
"client_secret": "",
"username":"yo...