--- title: "Changes to Issues access and refresh tokens based on grant type." method: POST path: "/token" --- # Changes to Issues access and refresh tokens based on grant type. `POST /token` > Every recorded change to this operation, newest first. ## Timeline Changed in 16 of 51 revisions. - **2025-09-24** `a222d9459767`: 1 warning, 1 info - **2025-07-24** `655f61075741`: 1 info - **2025-04-01** `d668f054caa8`: 4 info - **2025-02-07** `4d0f1a6c1ad9`: 1 breaking, 5 info - **2024-10-11** `f89bf040698f`: 1 breaking, 4 info - **2024-08-01** `b33a9ea8493e`: 1 info - **2024-05-08** `f46045187c80`: 10 info - **2023-12-17** `10e1a672aed3`: 3 info - **2023-12-13** `77f9aeb9339a`: 5 info - **2023-07-25** `cf0d742e0498`: 1 info - **2023-06-07** `6e387c78c192`: 1 info - **2023-04-03** `69a6f316592c`: 1 breaking, 1 info - **2023-03-24** `c34c07c83392`: 3 info - **2023-02-06** `144a34ca6d74`: 2 info - **2023-02-02** `42a6d0897c39`: 2 warning - **2023-02-01** `144a34ca6d74`: 5 breaking, 31 warning, 1 info ## Changes - **2025-09-24** `a222d9459767`: 1 warning, 1 info - removed the optional property `user/factors/items/web_authn_credential` from the response with the `200` status - added the optional property `user/factors/items/webauthn_credential` to the response with the `200` status - **2025-07-24** `655f61075741`: 1 info - added the new `ethereum` enum value to the request property `chain` - **2025-04-01** `d668f054caa8`: 4 info - added the new optional request property `chain` - added the new optional request property `message` - added the new optional request property `signature` - added the new enum value `web3` to the `query` request parameter `grant_type` - **2025-02-07** `4d0f1a6c1ad9`: 1 breaking, 5 info - the `user/factors/items/web_authn_credential` response's property type changed from `jsonb` to `string` for status `200` - api tag `oidc` removed - added the optional property `error_code` to the response with the `400` status - added the optional property `error_code` to the response with the `401` status - added the optional property `error_code` to the response with the `403` status - added the optional property `error_code` to the response with the `500` status - **2024-10-11** `f89bf040698f`: 1 breaking, 4 info - the response property `user/factors/items/phone` became nullable for the status `200` - added the optional property `user/factors/items/created_at` to the response with the `200` status - added the optional property `user/factors/items/last_challenged_at` to the response with the `200` status - added the optional property `user/factors/items/updated_at` to the response with the `200` status - added the optional property `user/factors/items/web_authn_credential` to the response with the `200` status - **2024-08-01** `b33a9ea8493e`: 1 info - added the optional property `user/factors/items/phone` to the response with the `200` status - **2024-05-08** `f46045187c80`: 10 info - added the optional property `user/identities/items/created_at` to the response with the `200` status - added the optional property `user/identities/items/email` to the response with the `200` status - added the optional property `user/identities/items/id` to the response with the `200` status - added the optional property `user/identities/items/identity_data` to the response with the `200` status - added the optional property `user/identities/items/identity_id` to the response with the `200` status - added the optional property `user/identities/items/last_sign_in_at` to the response with the `200` status - added the optional property `user/identities/items/provider` to the response with the `200` status - added the optional property `user/identities/items/updated_at` to the response with the `200` status - added the optional property `user/identities/items/user_id` to the response with the `200` status - added the optional property `user/is_anonymous` to the response with the `200` status - **2023-12-17** `10e1a672aed3`: 3 info - added the new `azure` enum value to the request property `provider` - added the new `facebook` enum value to the request property `provider` - added the new `keycloak` enum value to the request property `provider` - **2023-12-13** `77f9aeb9339a`: 5 info - added the optional property `weak_password` to the response with the `200` status - added the optional property `weak_password` to the response with the `400` status - added the optional property `weak_password` to the response with the `401` status - added the optional property `weak_password` to the response with the `403` status - added the optional property `weak_password` to the response with the `500` status - **2023-07-25** `cf0d742e0498`: 1 info - added the optional property `expires_at` to the response with the `200` status - **2023-06-07** `6e387c78c192`: 1 info - added the new optional request property `access_token` - **2023-04-03** `69a6f316592c`: 1 breaking, 1 info - removed the enum value `oauth_pkce` from the `query` request parameter `grant_type` - added the new enum value `pkce` to the `query` request parameter `grant_type` - **2023-03-24** `c34c07c83392`: 3 info - added the new optional request property `auth_code` - added the new optional request property `code_verifier` - added the new enum value `oauth_pkce` to the `query` request parameter `grant_type` - **2023-02-06** `144a34ca6d74`: 2 info - added the new optional request property `client_id` - added the new optional request property `issuer` - **2023-02-02** `42a6d0897c39`: 2 warning - removed the request property `client_id` - removed the request property `issuer` - **2023-02-01** `144a34ca6d74`: 5 breaking, 31 warning, 1 info - removed the enum value `pkce` from the `query` request parameter `grant_type` - removed the enum value `web3` from the `query` request parameter `grant_type` - removed the enum value `azure` of the request property `provider` - removed the enum value `facebook` of the request property `provider` - removed the enum value `keycloak` of the request property `provider` - removed the request property `access_token` - removed the request property `auth_code` - removed the request property `chain` - removed the request property `code_verifier` - removed the request property `message` - removed the request property `signature` - removed the optional property `error_code` from the response with the `400` status - removed the optional property `error_code` from the response with the `401` status - removed the optional property `error_code` from the response with the `403` status - removed the optional property `error_code` from the response with the `500` status - removed the optional property `expires_at` from the response with the `200` status - removed the optional property `user/factors/items/created_at` from the response with the `200` status - removed the optional property `user/factors/items/last_challenged_at` from the response with the `200` status - removed the optional property `user/factors/items/phone` from the response with the `200` status - removed the optional property `user/factors/items/updated_at` from the response with the `200` status - removed the optional property `user/factors/items/webauthn_credential` from the response with the `200` status - removed the optional property `user/identities/items/created_at` from the response with the `200` status - removed the optional property `user/identities/items/email` from the response with the `200` status - removed the optional property `user/identities/items/id` from the response with the `200` status - removed the optional property `user/identities/items/identity_data` from the response with the `200` status - removed the optional property `user/identities/items/identity_id` from the response with the `200` status - removed the optional property `user/identities/items/last_sign_in_at` from the response with the `200` status - removed the optional property `user/identities/items/provider` from the response with the `200` status - removed the optional property `user/identities/items/updated_at` from the response with the `200` status - removed the optional property `user/identities/items/user_id` from the response with the `200` status - removed the optional property `user/is_anonymous` from the response with the `200` status - removed the optional property `weak_password` from the response with the `200` status - removed the optional property `weak_password` from the response with the `400` status - removed the optional property `weak_password` from the response with the `401` status - removed the optional property `weak_password` from the response with the `403` status - removed the optional property `weak_password` from the response with the `500` status - api tag `oidc` added --- [Operation](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/docs/token/post.md) - [API](https://skmtc.dev/supabase/apis/supabase-auth-rest-api.md) - [Page](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/changes/token/post)