oauth

Token endpoint

Exchange an authorization code (with PKCE code_verifier) or a refresh token for an access token.

post/api/auth/oauth2/token

Response

Standard OAuth token envelope.

access_tokenstring required

token_typestring required

expires_ininteger

Access token lifetime in seconds (3600).

refresh_tokenstring

scopestring

id_tokenstring

{
  "token_type": "Bearer"
}