OAuth 2.0 / OpenID Connect
OAuth 2.0 Token Endpoint
Returns access (and potentially refresh) tokens for making API requests.
For confidential client application types this endpoint requires client authentication using one of the supported methods (client_secret_basic, client_secret_jwt or private_key_jwt)
For non-confidential client application types the client identifier must be provided via client_id request attribute.
post/restapi/oauth/token
Response
Access/Refresh Tokens
Example response
{
"access_token": "U1BCMDFUMDRKV1MwMXxzLFSvXdw5PHMsVLEn_MrtcyxUsw",
"expires_in": 7199,
"refresh_token": "U1BCMDFUMDRKV1MwMXxzLFL4ec6A0XMsUv9wLriecyxS_w",
"refresh_token_expires_in": 604799,
"scope": "AccountInfo CallLog ExtensionInfo Messages SMS",
"token_type": "bearer",
"owner_id": "256440016",
"endpoint_id": "8zXq6oaLT7WvwWITlGiA1A",
"session_expiration_time": "2023-04-01T12:00:01Z"
}