OAuth

Token endpoint (authorization code with PKCE)

Exchanges the authorization code obtained from /oauth/authorize/ on the main site for an access token. The code is single use, bound to the client_id and redirect_uri of the authorization request, and verified against the PKCE code_verifier. The access token is a regular Bearer token of this API: it lasts a year, there is no refresh token, and the user can see and revoke it from the application tokens screen of their profile.

post/v1/oauth/token/

Request

Base URL: https://api.educaplay.com
URL: https://api.educaplay.com/v1/oauth/token/
Auth: none required

Response

Access token issued.

access_tokenstring

token_typestring

expires_ininteger

Seconds until the token expires.

scopestring

Example response

{
  "token_type": "Bearer",
  "expires_in": 31536000,
  "scope": "educaplay"
}

Changes

No recorded changes to this operation across all 1 revision of this API.