Token

OAuth 2.0 Token Endpoint

Exchanges authorization code or refresh token for access token.

Grant Types:

1. authorization_code: Exchange authorization code for tokens

   • Required: grant_type, code, redirect_uri, client_id, client_secret
   • Optional: code_verifier (required if PKCE was used)

2. refresh_token: Exchange refresh token for new access token

   • Required: grant_type, refresh_token, client_id, client_secret

Returns:

• access_token: Bearer token for API access (1 hour TTL)
• token_type: "Bearer"
• expires_in: Seconds until access token expires
• refresh_token: Token for refreshing access (30 days TTL)
• scopes: List of scopes