Get username and password of a contact using REST

The only time I’ve seen that with tokens that are still valid is if the client_secret/client_id weren’t assigned before the call?