ORory
OAuth

Code exchange

Changed on
post/oauth/token

Request

  • Base URL
    http://localhost:5225
  • URL
    http://localhost:5225/oauth/token
  • Auth
    API key in header Authorization

Request body application/x-www-form-urlencoded

grant_typestring required

Grant type should be 'authorization_code'

client_idstring required

Use the client_id returned by the SAML connection API

client_secretstring required

Use the client_secret returned by the SAML connection API

code_verifierstring

code_verifier against the code_challenge in the authz request (relevant to PKCE flow)

redirect_uristring required

Redirect URI

codestring required

Code

Response

Success

access_tokenstring
token_typestring
expires_instring

Example response

{
  "access_token": "8958e13053832b5af58fdf2ee83f35f5d013dc74",
  "token_type": "bearer",
  "expires_in": "300"
}

Changes

  • f02a45abeffcRevision changes
    • breaking

      added required request body

    • info

      added the media type application/json for the response with the status

  • d49c203898c2Revision changes
    • breaking

      removed the request body

    • breaking

      removed the media type application/json for the response with the status