Authentication

Exchange a PKCE authorization code, poll a device code, or rotate a CLI refresh token

No bearer required. For authorization_code, send code, exact redirect_uri, and the original code_verifier; S256 must match the approved challenge. Codes expire after 120 seconds and are single-use. For device grants: authorization_pending: continue polling; slow_down: add 5 seconds to every subsequent interval; access_denied, expired_token, invalid_grant: stop. Access tokens last 900 seconds. Refresh tokens rotate once per use; reuse revokes the session. Serialize refreshes and save the returned pair atomically. Sessions expire after 90 days. Never log tokens.

post/v1/auth/token

Request

  • Base URL: https://api.masko.ai
  • URL: https://api.masko.ai/v1/auth/token
  • Auth: none required

Request body

OR
OR

Response

Success. Cache-Control: no-store.

Changes

No recorded changes to this operation across all 1 revision of this API.