OAuth2

Exchange a token grant

Exchange a token grant.

post/oauth2/token

Response

OK

access_tokenstring
refresh_tokenstring
token_typestring

Always 'bearer'

expires_ininteger

Token lifetime in seconds

scopestring

Space-separated list of granted scopes

issue_dateinteger

Changes

Changed in 3 of the 7 revisions of this API.4410

  • e271d0e41f6d23See the full diff
    • request body became required

      request-body-became-required

    • removed the media type application/json from the request body

      request-body-media-type-removed

    • api operation id post_oauth2_token removed and replaced with postOauth2Token

      api-operation-id-removed

    • added the new optional header request parameter XF-Api-User to all path's operations

      new-optional-request-default-parameter-to-existing-path

    • added the new optional query request parameter api_bypass_permissions to all path's operations

      new-optional-request-default-parameter-to-existing-path

    This revision also has 3 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

    • api tag OAuth2 added

      api-tag-added

    • api tag oauth2 removed

      api-tag-removed

    • added optional request body

      request-body-added-optional

    • added the media type application/json for the response with the status 200

      response-media-type-added

  • fc0a40f3b859243See the full diff
    • removed the request body

      request-body-removed

    • removed the media type application/json for the response with the status 200

      response-media-type-removed

    • the optional response header XF-Latest-Api-Version removed for the status 200

      optional-response-header-removed

    • the optional response header XF-Request-User removed for the status 200

      optional-response-header-removed

    • the optional response header XF-Request-User-Extras removed for the status 200

      optional-response-header-removed

    • the optional response header XF-Used-Api-Version removed for the status 200

      optional-response-header-removed

    • api operation id postOauth2Token removed and replaced with post_oauth2_token

      api-operation-id-removed

    • api tag oauth2 added

      api-tag-added

    • api tag OAuth2 removed

      api-tag-removed

    This revision also has 18 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog