auth

OAuth token endpoint

Changed on

Handles authorization_code grants (with PKCE) and token exchange (RFC 8693). For token-exchange, supported subject_token_type values are urn:ietf:params:oauth:token-type:id_token and urn:ietf:params:oauth:token-type:access_token.

post/oauth/token

Request

  • The document declares no server URL.
  • Auth
    none declared

Request body application/x-www-form-urlencoded

grant_typestring required

authorization_code or urn:ietf:params:oauth:grant-type:token-exchange

subject_tokenstring

Token to exchange (token-exchange grant only)

subject_token_typestring

id_token or access_token URI (token-exchange grant only)

Response

OK

access_tokenstring
expires_ininteger
issued_token_typestring
token_typestring

Changes