Exchange the Authorization Code for an Access Token.

POST

/auth/oauth/access

The user system supports an OAuth 2.0 Authorization Code Grant. This call generates an access and refresh token from an OAuth 2.0 Authorization Code Grant. This API can also be used to generate a new access token with a given refresh token. Instead of using the authorization code in the body of the request (code), use the refresh token (refresh_token).

Request

Header Params

Body Params application/x-www-form-urlencoded

Responses

🟢200OK

application/json

Bodyapplication/json

🟠400Bad Request

🟠401Unauthorised

🔴500Internal Server Error

Request Example

Shell

JavaScript

Java

Swift

curl --location '/auth/oauth/access' \
--header 'Accept: application/json' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'client_id=true' \
--data-urlencode 'client_secret=2b9d75b3ae36bOQHe28202' \
--data-urlencode 'grant_type=authorization_code' \
--data-urlencode 'code=2b9d75b3ae36bdf3b66724b89996094ba724278784'

Response Example

200 - OK

{
  "token_type": "bearer",
  "access_token": "9defd68267e8de48a65bb5a9faaef8b81391c7ae69c60ccb826d8060cf500afac1f1441b3067a445af7bbd91ec",
  "refresh_type": "0d3c5b212c6e0d6a09a10d8d613353a32267c009856779a49c258bae52eb7511705ae4916b98441b3067ad445a",
  "expires_in": 604800
}

Modified at 2025-09-21 08:06:45

delete a token

Check and validate an Oauth Access token.