ORory
oAuth2

The OAuth 2.0 Token Endpoint

Changed on

Use open source libraries to perform OAuth 2.0 and OpenID Connect available for any programming language. You can find a list of libraries here https://oauth.net/code/

This endpoint should not be used via the Ory SDK and is only included for technical reasons. Instead, use one of the libraries linked above.

post/oauth2/token

Request

  • Base URL
    / (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /oauth2/token
  • Auth
    • HTTP basic
    • or OAuth 2
      Authorization code: https://hydra.demo.ory.sh/oauth2/auth
      Token URL: https://hydra.demo.ory.sh/oauth2/token

Request body application/x-www-form-urlencoded

client_idstring
codestring
grant_typestring required
redirect_uristring
refresh_tokenstring

Response

oAuth2TokenExchange

access_tokenstring

The access token issued by the authorization server.

expires_ininteger

The lifetime in seconds of the access token. For example, the value "3600" denotes that the access token will expire in one hour from the time the response was generated.

id_tokenstring

To retrieve a refresh token request the id_token scope.

refresh_tokenstring

The refresh token, which can be used to obtain new access tokens. To retrieve it add the scope "offline" to your access token request.

scopestring

The scope of the access token

token_typestring

The type of the token issued

Example response

{
  "access_token": "access_token",
  "refresh_token": "refresh_token",
  "scope": "scope",
  "id_token": "id_token",
  "token_type": "token_type",
  "expires_in": 0
}

Changes

  • 02c4930b8c92Revision changes
    • breaking

      the response's property type changed from integer to string, and format from int64 to no format for status

  • b01beb353b55Revision changes
    • breaking

      the response's property type changed from integer to string, and format from int64 to no format for status