---
title: "OAuth token endpoint"
method: POST
path: "/oauth/token"
tags: ["OAuth Authorization"]
---

# OAuth token endpoint

`POST /oauth/token`

Exchanges an authorization code or refresh token for an access token. Supports grant_type=authorization_code and grant_type=refresh_token. Supports PKCE for public clients.

## Query parameters

- `grant_type` string, required
- `code` string
- `client_id` string, required
- `client_secret` string
- `redirect_uri` string
- `code_verifier` string
- `refresh_token` string

## Response `200`

OK

- OAuthTokenResponseDto
  - `access_token` string
  - `token_type` string
  - `expires_in` integer
  - `refresh_token` string

---

[API](https://skmtc.dev/transferz/apis/authentication-api.md) · [All operations](https://skmtc.dev/transferz/apis/authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/transferz/authentication-api/revisions/73249fb480f2/schema)