Get OAuth Access Token
POST/oauth/token
Exchange OAuth credentials for a bearer access token. This single endpoint serves all three
supported grant types, selected by the grant_type form field. The client authenticates with
HTTP Basic auth (client_id:client_secret, base64-encoded) in the Authorization header.
grant_type | Flow | Required fields (besides grant_type and client_id) |
|---|---|---|
client_credentials | Client Credentials | client_secret |
authorization_code | Code Authorisation | code, plus redirect_uri if multiple are registered |
refresh_token | Code Authorisation | refresh_token |
The authorization_code and refresh_token grants belong to the Code Authorisation flow, whose
consent redirect happens in the browser before this exchange. See the
Code Authorisation guide for the full flow and redirect URI rules.
Request
Responses
- 200
OAuth access token