oauth

Generate OAuth 2.0 access token using authorization code or refresh token

This endpoint is used to exchange an authorization code or refresh token for an access token.

Notes:

  • The Authorization Code Grant Flow requires a grant_type of authorization_code and a valid code obtained from the authorization URL.
  • The Refresh Token Grant Flow requires a grant_type of refresh_token and a valid refresh_token.
  • Traditional clients authenticate using HTTP Basic Authentication: send Authorization: Basic base64(client_id:client_secret).
  • Public clients (URL-based client_id) do not send credentials in the header — instead, send client_id in the request body.

Public clients (Client ID Metadata Document)

If your client_id is an HTTPS URL pointing to a metadata document, do not send a client_secret. Instead, include a code_verifier (PKCE) when exchanging an authorization code. See the OAuth for AI & Third-Party Clients guide.

post/oauth/token

Request

  • Base URL: https://docs-api.formify.eu/v1
  • URL: https://docs-api.formify.eu/v1/oauth/token
  • Auth: one of:
    • HTTP basic
    • none

Response

Token generated successfully

access_tokenstring

The access token.

expires_ininteger

The number of seconds until the access token expires.

refresh_tokenstring

The refresh token.

token_typestring

The type of token.

scopestring

Space-separated list of permissions granted to this token (e.g. read, write, or read write).

Example response

{
  "scope": "read write"
}

Changes

No recorded changes to this operation across all 1 revision of this API.