Sign in

v5

latestOpenAPI 3.0.0raw.githubusercontent.com2025-09-30102742.8 KB
Integrated Authorization Server

Access token endpoint

Issues an access token based on an authorization request, in case the integrated authorization server is enabled

post/token

Request body

client_idstring

Unique identifier for the client making the request

codestring

Authorization code received from the authorization server

code_verifierstring

Code verifier used in the PKCE flow

grant_type'authorization_code' | 'urn:ietf:params:oauth:grant-type:pre-authorized_code' | 'password' required

OAuth 2.0 grant type

pre-authorized_codestring

Pre-authorized code used for credential issuance

redirect_uristring

The redirect URI where the response should be sent

scopestring

The scope of access requested by the client

user_pinstring

PIN required for pre-authorized flows (if applicable)

tx_codestring

Transaction code for authorization (if applicable)

Example request

{
  "client_id": "client-12345",
  "code": "abc123xyz",
  "code_verifier": "s256-code-verifier",
  "grant_type": "authorization_code",
  "pre-authorized_code": "pre-auth-code-xyz",
  "redirect_uri": "https://wallet.example.com/callback",
  "scope": "openid credential",
  "user_pin": "1234",
  "tx_code": "tx-56789"
}

Response

Successful response

access_tokenstring required

The issued access token

scopestring

The granted scope(s) of the access token

token_typestring required

The type of token issued (typically "Bearer")

expires_innumber

The duration in seconds for which the token is valid

authorization_pendingboolean

Indicates if authorization is still pending

intervalnumber

The recommended polling interval in seconds

Example response

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "scope": "openid credential",
  "token_type": "Bearer",
  "expires_in": 3600,
  "interval": 5
}