Creates and renews AccessTokens

Grant Type.

Authorization code that the client previously received from the authorization server. Required when grant_type is authorization_code.

The redirect URI in the token request must be an exact match of the redirect URI that was used when generating the authorization code. Required for when grant_type is authorization_code.

Refresh token that the client previously received from the authorization server. Required when grant_type is refresh_token.

Client ID used for authentication.

Client Secret used for authentication, only used in Server-Side Apps

Code verifier(PKCE), only used in Mobile and Native Apps

Only used with the combination of client_credentials grant_type and client_assertion_type

Only used with the combination of client_credentials grant_type and client_assertion

Date and Time in ISO8601 format example: '2018-11-06T10:20:37.094533Z'

Date and Time in ISO8601 format example: '2018-11-06T10:20:37.094533Z'

Token type

List of scopes

Refresh token should be used after the access token is expired to fetch a new access token

Expiration time in seconds

Authorization Id could be used later on in authorization_changed Webhook

Access token

In BMW and MINI case, the status is pending until the car owner grants access in BMW ConnectedDrive Portal