---
title: "Token endpoint: authorization_code (PKCE) and refresh_token (rotating)"
method: POST
path: "/v1/oauth/token"
tags: ["oauth"]
---

# Token endpoint: authorization_code (PKCE) and refresh_token (rotating)

`POST /v1/oauth/token`

## Request

- Base URL: `https://api.ditto.audio` (the document declares no server; this is the origin it was published from)
- URL: `https://api.ditto.audio/v1/oauth/token`
- Auth: none declared

Form-encoded or JSON. Access tokens (`ditto_oat_…`) last one hour.

## Response `200`

---

[API](https://skmtc.dev/ditto/apis/ditto-audio-api.md) · [All operations](https://skmtc.dev/ditto/apis/ditto-audio-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ditto/apis/ditto-audio-api/revisions/30c8d7c218da?raw)