Oauth token endpoint
POST/v2/oauth/token
Oauth token endpoint to generate access token
Request
Header Parameters
Required for confidential application, JWT bearer token for jwt-bearer
grant or basic token for other grant_type
- application/x-www-form-urlencoded
Body
Possible values: [authorization_code
, refresh_token
, client_credentials
, urn:ietf:params:oauth:grant-type:jwt-bearer
]
Required if grant_type
is JWT Bearer Grant
Scopes that will be granted to JWT, space delimited, default to client application's configured scopes
Use with jwt-bearer or client_credentials, tenant connection code that client application wants to access, default to application's tenant if not specified
Refresh token that will be used with grant type refresh_token
Authorization code, required for authorization_code grant type
Redirect uri used in authorization code flow, required for authorization_code and refresh_token grant type
Code verifier needed for Authorization Code Flow with PKCE
Client id is needed for public application (SPA, mobile app) if authorization header was not used
Responses
- 200
OK
- application/json
- Schema
- Example (from schema)
Schema
Refresh token will be returned or not depends on grant_type
Access token type (Bearer)
The scopes that the token has
Token expires time in seconds
{
"access_token": "string",
"refresh_token": "string",
"token_type": "string",
"scopes": [
"string"
],
"expires_in": 0
}