POST /token — idptools-api

post/token

Request body

grant_typestring required

The OAuth2 / OIDC Grant / Flow Type

client_idstring required

The OAuth2 client identifier

codestring required

The OAuth2 Authorization Code

redirect_uristring required

The registered redirect (callback) URI for the OAuth2 application definition.

scopestring required

The requested OAuth2 scope.

token_endpointstring required

The Token Endpoint URL for this OAuth2 Provider

sslValidateboolean required

Validate the token endpoint SSL/TLS certificate

resourcestring

Resource parameter

refresh_tokenstring

OAuth2 Refresh Token needed for Refresh Grant

usernamestring

The username used with the OAuth2 Resource Owner Credential Grant

passwordstring

The password used with the OAuth2 Resource Owner Credential Grant

client_secretstring

The client secret for a confidential client

customParamsobject

List of key:value pairs

200 response

access_tokenstring required

The OAuth2 Access Token

id_tokenstring

The OpenID Connect ID Token

refresh_tokenstring

The OAuth2 Refresh Token

expires_instring required

How long the access token is valid (seconds)

token_typestring

The OAuth2 Access Token type

Changed in 2 of the 2 revisions of this API.32

Jul 17, 2026935d9319cbbf1See the full diff
- ○
  api tag Debugger removed
  api-tag-removed
Jun 29, 2020a308ee341fe131See the full diff
- ●
  the optional response header Access-Control-Allow-Origin removed for the status 200
  optional-response-header-removed
- ●
  the optional response header Access-Control-Allow-Origin removed for the status 400
  optional-response-header-removed
- ●
  the optional response header Access-Control-Allow-Origin removed for the status 500
  optional-response-header-removed
- ○
  api tag Debugger added
  api-tag-added