OAuth

Token endpoint

Exchanges an authorization code (with the PKCE code_verifier) or a refresh token for tokens. Client auth via HTTP Basic or body params; confidential clients must present client_secret. Refresh tokens rotate: each refresh returns a new refresh_token and retires the previous one (replaying a retired token revokes the whole family); pass scope to down-scope. Errors are RFC 6749 JSON documents.

post/oauth/token

Request

  • Base URL: https://everypage.co
  • URL: https://everypage.co/oauth/token
  • Auth: none required

Response

Token response

access_tokenstring
token_typestring
expires_ininteger
refresh_tokenstring
scopestring

Example response

{
  "access_token": "ep_at_...",
  "token_type": "Bearer"
}

Changes

No recorded changes to this operation across all 1 revision of this API.