---
title: "OIDC Token Request"
method: POST
path: "/oidc/token"
tags: ["oidc4ci"]
---

# OIDC Token Request

`POST /oidc/token`

Issues access token and optionally a refresh token for the exchange of authorization code that client has obtained after successful authorization response.

## Response `200`

OK

- AccessTokenResponse — Model for Access Token Response.
  - `access_token` string, required — The access token issued by the authorization server.
  - `token_type` string, required — The type of the token issued.
  - `expires_in` integer — The lifetime in seconds of the access token.
  - `refresh_token` string — The refresh token, which can be used to obtain new access tokens.
  - `scope` string — OPTIONAL, if identical to the scope requested by the client; otherwise, REQUIRED.
  - `c_nonce` string — String containing a nonce to be used to create a proof of possession of key material when requesting a credential.
  - `c_nonce_expires_in` integer — Integer denoting the lifetime in seconds of the c_nonce.
  - `authorization_details` AuthorizationDetails[] — REQUIRED when authorization_details parameter is used to request issuance of a certain Credential type as defined in Section 5.1.1. It MUST NOT be used otherwise. It is an array of objects, as defined in Section 7 of [RFC9396]. — unresolved $ref

## Other responses

- `400` — Bad Request

---

[API](https://skmtc.net/trustbloc/apis/verifiable-credential-service-vcs.md) · [All operations](https://skmtc.net/trustbloc/apis/verifiable-credential-service-vcs/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/trustbloc/verifiable-credential-service-vcs/revisions/9e21ad997121/schema)