Sign in

v1

latestOpenAPI 3.0.1License2026-07-17236107.1 KB
developers

Get Tokens By Code

Get tokens by code

post/get-tokens-by-code

Headers

Authorizationstring
AuthorizationOxdIdstring

Request body

oxd_idstring required
codestring required
statestring required
authentication_methodstring

if value is missed then basic authentication is used. Otherwise it's possible to set private_key_jwt value for Private Key authentication.

algorithmstring

optional but is required if authentication_method=private_key_jwt. Valid values are none, HS256, HS384, HS512, RS256, RS384, RS512, ES256, ES384, ES512

Example request

{
  "oxd_id": "bcad760f-91ba-46e1-a020-05e4281d91b6",
  "code": "0b9f1518-15aa-47b2-9477-d4c607447e18",
  "state": "6q1ec90hn6ui4ipigv91hrbodj"
}

Response

OK

access_tokenstring required
expires_ininteger required
id_tokenstring required
refresh_tokenstring required
id_token_claimsobject required

Example response

{
  "access_token": "b75434ff-f465-4b70-92e4-b7ba6b6c58f2",
  "expires_in": 299,
  "id_token": "eyJraWQiOiI5MTUyNTU1Ni04YmIwLTQ2MzYtYTFhYy05ZGVlNjlhMDBmYWUiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJp",
  "refresh_token": "33d7988e-6ffb-4fe5-8c2a-0e158691d446"
}