v51

latestSwagger 2.0raw.githubusercontent.com2026-08-015253175.3 KB

oAuth2

The OAuth 2.0 Token Endpoint

Use open source libraries to perform OAuth 2.0 and OpenID Connect available for any programming language. You can find a list of libraries here https://oauth.net/code/

This endpoint should not be used via the Ory SDK and is only included for technical reasons. Instead, use one of the libraries linked above.

post/oauth2/token

Response

oAuth2TokenExchange

access_tokenstring

The access token issued by the authorization server.

expires_ininteger

The lifetime in seconds of the access token. For example, the value "3600" denotes that the access token will expire in one hour from the time the response was generated.

id_tokenstring

To retrieve a refresh token request the id_token scope.

refresh_tokenstring

The refresh token, which can be used to obtain new access tokens. To retrieve it add the scope "offline" to your access token request.

scopestring

The scope of the access token

token_typestring

The type of the token issued