auth

Token endpoint: authorization_code + code_verifier, or refresh_token (rotation)

Form-encoded (RFC 6749). Returns {access_token:"cko_…", token_type:"Bearer", expires_in:3600, refresh_token:"ckr_…", scope} with Cache-Control: no-store. Codes are single use (consumed even on failure). Refresh tokens rotate: the previous one is invalidated in the same call. Errors: invalid_request, invalid_grant, invalid_client (401), unsupported_grant_type.

post/oauth/token

Request

Base URL: https://cliponit.app
URL: https://cliponit.app/oauth/token
Auth: none required

Response

Tokens

access_tokenstring

token_typestring

expires_ininteger

refresh_tokenstring

scopestring

Example response

{
  "access_token": "cko_…",
  "token_type": "Bearer",
  "expires_in": 3600,
  "refresh_token": "ckr_…",
  "scope": "clips"
}

Changes

No recorded changes to this operation across all 1 revision of this API.