Get Token (OAuth 2.0)

POST/oauth/token

Request Body

application/x-www-form-urlencoded

TypeScript Definitions

Use the request body type in TypeScript.

client_id?string

Client identifier (required for public clients or when not using HTTP Basic).

client_secret?string

Client secret (confidential clients; omit when using HTTP Basic or for public clients).

grant_type*"authorization_code"

Value in

"authorization_code"

code*string

Authorization code from /authorize.

redirect_uri*string

Must exactly match the redirect URI used at /authorize.

Formaturi

code_verifier?string

Required if a code_challenge was used at /authorize (PKCE).

Response Body

`application/json`

curl -X POST "https://example.com/oauth/token" \  -H "Content-Type: application/x-www-form-urlencoded" \  -d 'grant_type=authorization_code&code=abc123&redirect_uri=https%3A%2F%2Fapp.example.com%2Fcallback&code_verifier=rAnd0mlyGen3ratedString'

{  "access_token": "eyJhbGciOi...",  "token_type": "Bearer",  "expires_in": 3600,  "refresh_token": "r1fR3shTok3n",  "scope": "read:company write:company"}

Request BodyCopy Anchor Link

Response BodyCopy Anchor Link

200application/json

400application/json

401

500

Request Body

Response Body

`application/json`

`application/json`