---
title: "OAuth2 token endpoint (client_credentials, password, authorization_code, refresh_token)"
method: POST
path: "/auth/oauth/token"
tags: ["Auth Testing"]
---

# OAuth2 token endpoint (client_credentials, password, authorization_code, refresh_token)

`POST /auth/oauth/token`

Unified grant endpoint. Accepts JSON or application/x-www-form-urlencoded. Returns access_token (JWT) and, for user grants, a rotating refresh_token.

## Response `200`

Default Response

---

[API](https://skmtc.net/totalshiftleft/apis/api-learning-sandbox.md) · [All operations](https://skmtc.net/totalshiftleft/apis/api-learning-sandbox/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/totalshiftleft/api-learning-sandbox/revisions/3b3179c504b0/schema)