Skip to main content
POST
Swap a code or refresh token

Authorizations

Authorization
string
header
required

Confidential OAuth client credentials.

Body

application/x-www-form-urlencoded

Authenticate a public client with client_id; confidential clients use body credentials or HTTP Basic. Code exchange requires code, redirect_uri and code_verifier; refresh requires refresh_token.

grant_type
enum<string>
required
Available options:
authorization_code,
refresh_token
client_id
string
client_secret
string
code
string
redirect_uri
string<uri>
code_verifier
string
refresh_token
string
scope
string
resource
string<uri>

Response

OK

access_token
string
required
token_type
any
required
expires_in
integer
required
refresh_token
string
required
scope
string
required