OAuth 2.0 Token Endpoint

Token endpoint (RFC 6749 section 3.2). Exchanges an authorization code for
access and refresh tokens (authorization_code grant), or exchanges a refresh
token for new tokens (refresh_token grant).

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Form Data
string
enum
required
  • authorization_code: The standard authorization code grant (RFC 6749 section 4.1).
  • refresh_token: Exchange a refresh token for new tokens (RFC 6749 section 6).
Allowed:
string

The authorization code (required for authorization_code grant).

uri

Must match the redirect_uri used in the authorization request (required for authorization_code grant).

string

The client identifier.

string

PKCE code verifier (required for authorization_code grant). All public clients must use PKCE (RFC 7636).

string

The refresh token (required for refresh_token grant).

string

Space-separated list of requested scopes. For refresh_token grant, must be equal to or a subset of the originally granted scopes.

Responses

Language
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json