SUsupersetapp
agent-auth

Token endpoint

Exchanges an authorization code, a refresh token, or an RFC 7523 assertion for an access token. Supported grants are published in /.well-known/oauth-authorization-server.

post/oauth2/token

Request

  • Base URL
    https://www.supersetapp.com
  • URL
    https://www.supersetapp.com/oauth2/token
  • Auth
    none required

Request body application/x-www-form-urlencoded

grant_type'authorization_code' | 'refresh_token' | 'urn:ietf:params:oauth:grant-type:jwt-bearer' | 'urn:workos:agent-auth:grant-type:claim' required

One of the grants in the AS metadata.

codestring

Authorization code, for that grant.

code_verifierstring

PKCE verifier.

refresh_tokenstring

For the refresh grant.

assertionstring

For the assertion grants.

claim_tokenstring

For the claim grant's poll and later refreshes.

client_idstring
client_secretstring

With client_secret_post auth; Basic is also accepted.

redirect_uristring uri
resourcestring uri

Response

The issued token.

access_tokenstring required
token_type'Bearer' required
expires_ininteger required

Seconds until expiry.

refresh_tokenstring
scopestring required

Space-separated granted scopes.

identity_assertionstring

Claim grant only: the replacement assertion to hold from now on.

assertion_expiresstring date-time

Claim grant only: when that assertion stops working.

Changes

No recorded changes to this operation across all 1 revision of this API.