Obtain an access token

The authorization code received from the authorization server. Required when grant_type is "authorization_code".

Required for clients with PKCE flow when using authorization code. Use together with `grant_type=authorization_code`. This is the value whose hash was sent as `code_challenge` when starting the flow.

The grant type for the token request. Must be "authorization_code" for the authorization code flow or "refresh_token" when refreshing an access token.

The redirect URI that was used in the authorization request. Required when grant_type is `authorization_code`.

The refresh token from the last grant if the `offline_access` scope was included. Use together with `grant_type=refresh_token`.

A space-separated list of the scopes requested for the access token. Required when grant_type is `refresh_token`. Must be a subset of the scopes granted during the original authorization.

The access token issued by the authorization server.

The lifetime in seconds of the access token. For example, the value "3600" denotes that the access token will expire in one hour from the time the response was generated.

The refresh token, which can be used to obtain new access tokens using the same authorization grant.

The scope of the access token. A space-separated list of scopes.

The type of the token issued. Value is case insensitive and should be "Bearer".