---
title: "Changes to Exchange authorization code for session"
method: POST
path: "/token/exchange"
---

# Changes to Exchange authorization code for session

`POST /token/exchange`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 5 of 20 revisions.

- **2026-09-02** `7018a6ccd5c9`: 1 breaking
- **2026-06-24** `0fc5fd589dbf`: 1 warning
- **2026-04-20** `b39086c84b43`: 1 warning, 1 info
- **2026-03-27** `fbbb4ff76b2a`: 1 info
- **2025-10-10** `2bb5c4e40463`: 1 breaking

## Changes

- **2026-09-02** `7018a6ccd5c9`: 1 breaking
  - the response property `session/user/metadata` became nullable for the status `200`
- **2026-06-24** `0fc5fd589dbf`: 1 warning
  - added the new `otp-too-many-attempts` enum value to the `error` response property for the response status `default`
- **2026-04-20** `b39086c84b43`: 1 warning, 1 info
  - added the new `user-already-exists` enum value to the `error` response property for the response status `default`
  - removed the `email-already-in-use` enum value from the `error` response property for the response status `default`
- **2026-03-27** `fbbb4ff76b2a`: 1 info
  - endpoint added
- **2025-10-10** `2bb5c4e40463`: 1 breaking
  - api path removed without deprecation

---

[Operation](https://skmtc.dev/nhost/apis/nhost-authentication-api/docs/token/exchange/post.md) - [API](https://skmtc.dev/nhost/apis/nhost-authentication-api.md) - [Page](https://skmtc.dev/nhost/apis/nhost-authentication-api/changes/token/exchange/post)