PGpgedge
OAuth

Exchange a grant for tokens

Changed on

Implements the RFC 6749 token endpoint for the authorization_code and refresh_token grants, and the RFC 8628 device_code grant, dispatching on the grant_type form field. No bearer authentication is required.

post/oauth/token

Request

  • The document declares no server URL.
  • Auth
    none declared

Request body application/x-www-form-urlencoded

client_idstring
codestring
code_verifierstring
device_codestring
grant_type'authorization_code' | 'refresh_token' | 'urn:ietf:params:oauth:grant-type:device_code' required
redirect_uristring
refresh_tokenstring

Response

The issued access token, and a refresh token where the grant issues one.

access_tokenstring
expires_ininteger
refresh_tokenstring
token_typestring

Changes