Skip to main content
POST
Issue OAuth access token

Body

application/x-www-form-urlencoded

Token request params

grant_type
enum<string>
required

OAuth grant type. Supported values are authorization_code, client_credentials, and refresh_token.

Available options:
authorization_code,
client_credentials,
refresh_token
client_id
string

OAuth client identifier. Required for all grant types when client authentication is sent in the request body.

client_secret
string

OAuth client secret. Required for all grant types when client authentication is sent in the request body.

code
string

Authorization code received from the /oauth/authorize endpoint. Required when grant_type is authorization_code.

code_verifier
string

PKCE code verifier corresponding to the code_challenge sent to /oauth/authorize. Required when grant_type is authorization_code.

redirect_uri
string<uri>

Must match the redirect_uri used in the original /oauth/authorize request. Required when grant_type is authorization_code.

refresh_token
string

Required when grant_type is refresh_token.

Response

Successful token response

access_token
string
required

The access token

expires_in
integer
required

Token lifetime in seconds

token_type
string
required

Token type, e.g. Bearer

id_token
string

OpenID Connect ID token

refresh_token
string

The refresh token