ANanimahealth
Staff Identity

Exchange a one-use authorization code with PKCE

Public client; no client secret or refresh token. Wrong verifier consumes the code. Returns opaque access token plus RS256 ID token and sets a staff-session cookie. Tokens cannot authenticate service APIs.

post/cis2/token

Request

  • Base URL
    https://sim.animahealth.com
  • Auth
    none required

Request body application/x-www-form-urlencoded

grant_type'authorization_code' required
client_idstring required
redirect_uristring uri required
codestring required
code_verifierstring required

Response

Success

access_tokenstring required
id_tokenstring required
token_type'Bearer' required
expires_ininteger required
scopestring required

Changes

No recorded changes to this operation across all 1 revision of this API.