Authentication

The resource owner password credentials grant type is suitable in cases where the resource owner has a trust relationship with the client, such as the device operating system or a highly privileged application.

post/oauth/token

Request

  • The document declares no server URL.
  • Auth
    API key in header Authorization

Request body application/x-www-form-urlencoded

grant_typestring required

OAuth defines four grant types: authorization code, implicit, resource owner password credentials, and client credentials.

client_idstring required

Valid client credential.

client_secretstring required

Valid client credential.

usernamestring

The resource owner username.

passwordstring

The resource owner password.

codestring

Valid authorization code.

Response

ok

access_tokenstring required
expires_ininteger
id_tokenstring
refresh_tokenstring
token_typestring

Changes