Skip to main content
POST
Exchange an authorization code or rotate a refresh token

Authorizations

Authorization
string
header
required

OAuth confidential client id and client secret.

Body

application/x-www-form-urlencoded
grant_type
enum<string>
required
Available options:
authorization_code,
refresh_token
code
string
redirect_uri
string<uri>
code_verifier
string
refresh_token
string

Response

Opaque access token and optional rotating refresh token.

token_type
enum<string>
required
Available options:
Bearer
expires_in
integer
required
Required range: x >= 1
scope
string
required