Sign in

v1

latestOpenAPI 3.0.32026-08-065621.5 KB
OAuth

OAuth 2.0 Token Endpoint

Implements RFC 6749 Section 3.2.

Accepts either:

  • Authorization Code grant (grant_type=authorization_code)
  • Refresh Token grant (grant_type=refresh_token)

Client authentication is supported via:

  • HTTP Basic (Authorization: Basic base64(client_id:client_secret))
  • Form-POST parameters (client_id and client_secret in the body)

On success, returns a JSON body containing access_token, token_type, expires_in, and optionally refresh_token and scope.

post/oauth/token

Headers

Authorizationstring
Example:Basic Y2xpZW50SWQ6Y2xpZW50U2VjcmV0

HTTP Basic client authentication header (Basic base64(client_id:client_secret)).

Response

Successful token response.

access_tokenstring required

Bearer access token.

token_type'Bearer' required

Token type; always "Bearer".

expires_ininteger required

Number of seconds until the access token expires.

refresh_tokenstring nullable

Refresh token, if issued and still valid.

scopestring nullable

Space-delimited scopes granted.