---
title: "Submit form data"
method: POST
path: "/oid4vci/api/token"
tags: ["Issuer OID4VCI API"]
---

# Submit form data

`POST /oid4vci/api/token`

## Request

- Base URL: `http://localhost:8080`
- URL: `http://localhost:8080/oid4vci/api/token`
- Auth: none declared

## Headers

- `DPoP` string

## Request body `application/x-www-form-urlencoded`

- OauthAccessTokenRequest
  - `grant_type` string, required: The type of grant being requested. Must be 'urn:ietf:params:oauth:grant-type:pre-authorized_code' or 'refresh_token.
  - `pre-authorized_code` string, nullable: The code representing the authorization to obtain Credentials of a certain type. This parameter MUST be present if the grant_type is urn:ietf:params:oauth:grant-type:pre-authorized_code.
  - `refresh_token` string, nullable: The refresh token, which can be used to obtain new access tokens.
  - `tx_code` string, nullable: String value containing a Transaction Code value itself. This value MUST be present if a tx_code object was present in the Credential Offer (including if the object was empty). This parameter MUST only be used if the grant_type is urn:ietf:params:oauth:grant-type:pre-authorized_code.

## Response `200`

OK

- OAuthToken
  - `scope` string
  - `access_token` string, required
  - `refresh_token` string
  - `token_type` string
  - `expires_in` integer

## Other responses

- `400`: Invalid request, grant or token
- `401`: Unauthorized
- `405`: HTTP method not allowed
- `415`: Unsupported content type
- `500`: Internal Server Error

## Changes

- **2026-10-06** `d24758bc44e0`: 3 info
  - the request property `pre-authorized_code` became nullable
  - the request property `refresh_token` became nullable
  - the request property `tx_code` became nullable
- **2026-10-02** `5801ba525101`: 1 info
  - added the new optional request property `tx_code`
- **2026-09-16** `5f1ad9f9b9c2`: 5 info
  - added the non-success response with the status `400`
  - added the non-success response with the status `401`
  - added the non-success response with the status `405`
  - added the non-success response with the status `415`
  - …1 more
- **2026-05-26** `beb3cc8fa8bf`: 1 info
  - removed the non-success response with the status `404`
- **2026-03-03** `6995e0ca6e2e`: 2 warning
  - removed the optional property `c_nonce` from the response with the `200` status
  - removed the optional property `cnonce` from the response with the `200` status

[Operation history](https://skmtc.dev/swiyu/apis/issuer-service-api/changes/oid4vci/api/token/post.md)

---

[API](https://skmtc.dev/swiyu/apis/issuer-service-api.md) - [All operations](https://skmtc.dev/swiyu/apis/issuer-service-api/llms.txt) - [OpenAPI document](https://skmtc.dev/swiyu/apis/issuer-service-api/revisions/f2f3fbbaf461?raw)