---
title: "Exchange OAuth2 token"
method: POST
path: "/oauth2/token"
tags: ["OAuth2"]
---

# Exchange OAuth2 token

`POST /oauth2/token`

Exchanges authorization code or other grant type for access tokens. Supports authorization code, refresh token, and client credentials flows. Client authentication via authorization header or client credentials.

## Response `200`

Success

- OAuth2TokenResponse
  - `access_token` string, required — The access token for API authorization
  - `token_type` string, required — The type of token, typically "Bearer"
  - `expires_in` integer, required
  - `refresh_token` string, required — The refresh token for obtaining new access tokens
  - `scope` string, required — The space-separated list of granted scopes

## Other responses

- `400` — Bad Request - The request was malformed or contained invalid data
- `429` — Too Many Requests - You are being rate limited
- `500` — Internal Server Error - An unexpected error occurred

## Changes

> 11 revisions in range; 1 not diffed.

- **2026-09-06** `a52a2cf49d9b` — 16 warning
  - added the new `IP_BAN_DECLINED` enum value to the `code` response property for the response status `400`
  - added the new `IP_BAN_DECLINED` enum value to the `code` response property for the response status `500`
  - added the new `PHONE_COUNTRY_NOT_SUPPORTED` enum value to the `code` response property for the response status `400`
  - added the new `PHONE_COUNTRY_NOT_SUPPORTED` enum value to the `code` response property for the response status `500`
  - …12 more
  - …this revision’s changelog is incomplete
- **2026-09-05** `4dbb738a3e22` — 2 info
  - removed the `NSFW_EMOJI_STICKER_BLOCKED` enum value from the `code` response property for the response status `400`
  - removed the `NSFW_EMOJI_STICKER_BLOCKED` enum value from the `code` response property for the response status `500`
- **2026-09-03** `fa36b1b48ca5` — 10 info
  - removed the `INVALID_PACK_TYPE` enum value from the `code` response property for the response status `400`
  - removed the `INVALID_PACK_TYPE` enum value from the `code` response property for the response status `500`
  - removed the `MAX_PACKS` enum value from the `code` response property for the response status `400`
  - removed the `MAX_PACKS` enum value from the `code` response property for the response status `500`
  - …6 more

[Change history](https://skmtc.dev/fluxer/apis/fluxer-api/changes/oauth2/token/post.md)

---

[API](https://skmtc.dev/fluxer/apis/fluxer-api.md) · [All operations](https://skmtc.dev/fluxer/apis/fluxer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/fluxer/apis/fluxer-api/revisions/ff422d03f58a?raw)