OAuth

Token endpoint (RFC 6749 §3.2)

Exchange an authorization code or refresh token for an access token. PKCE code_verifier required. Refresh tokens rotate on every use; reuse triggers family invalidation (OAuth 2.1 §4.3.1).

post/oauth/token

Request

  • Base URL: https://passport.me
  • URL: https://passport.me/oauth/token
  • Auth: none required

Response

Token issued

access_tokenstring
token_type'Bearer'
expires_ininteger
refresh_tokenstring
scopestring

Changes

No recorded changes to this operation across all 1 revision of this API.