Sign in
Token

To obtain an Access Token, an ID Token, and optionally a Refresh Token, the RP (Client).

To obtain an Access Token, an ID Token, and optionally a Refresh Token, the RP (Client).

post/token

Response

OK

access_tokenstring required

The access token issued by the authorization server.

token_typestring required

The access token type provides the client with the information required to successfully utilize the access token to make a protected resource request (along with type-specific attributes).

expires_ininteger

The lifetime in seconds of the access token. For example, the value "3600" denotes that the access token will expire in one hour from the time the response was generated.

refresh_tokenstring

The refresh token, which can be used to obtain new access tokens using the same authorization grant

scopestring[]
id_tokenstring

Example response

{
  "scope": [
    "openid",
    "oxd"
  ]
}

Changes