POST
/
oauth2
/
token
{
  "access_token": "<string>",
  "token_type": "Bearer",
  "scope": "openid profile email",
  "refresh_token": "<string>",
  "id_token": "<string>",
  "expires_in": 3600
}

Body

application/x-www-form-urlencoded
​
grant_type
enum<string>
required

The grant type

Available options:
authorization_code,
refresh_token,
urn:ietf:params:oauth:grant-type:device_code
Example:

"authorization_code"

​
code
string

The authorization code, required for authorization code flow

Example:

"33742103-b60c-4cfd-afca-3673e3f867f4"

​
device_code
string

The device code, required for device flow

Example:

"33742103-b60c-4cfd-afca-3673e3f867f4"

​
client_id
string

The client identifier, required for device flow

Example:

"{{CLIENT_ID}}"

​
refresh_token
string

The refresh token, required for refresh token flow

Example:

"33742103-b60c-4cfd-afca-3673e3f867f4"

​
redirect_uri
string

The redirect URI, required for authorization code flow

Example:

"https://myloanapp.com/callback"

Response

200 - application/json

Token obtained successfully

​
access_token
string
required

The access token issued by the authorization server

​
token_type
enum<string>
required

The type of token issued

Available options:
Bearer
​
expires_in
integer
required

The lifetime in seconds of the access token

Example:

3600

​
scope
string

The scope of the token

Example:

"openid profile email"

​
refresh_token
string

The refresh token issued by the authorization server

​
id_token
string

The ID token issued by the authorization server

⌘I