Token

Exchange authorization code for access token Validates the authorization code and creates a JWT access token for the holder

post

Creates a new access token using an authorization code

Body

application/json

Request containing the authorization code

authorization_codestringRequired

Authorization code received from the authorization request The code must be a non-empty string in format of [A-Za-z0-9-_] with length between 32 and 128 characters

Example: AF3DiOZy_x1jF9mKJqUwN5JDnpxk0GlwJMdfQOiAbc

Responses

201

Success

application/json

Response DTO for access token operations

access_tokenstringRequired

JWT access token

Example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJkaWQ6ZW1wZToweDEyMzQ1Njc4OTBhYmNkZWYiLCJpYXQiOjE2NjQ4OTc3NDIsImV4cCI6MTY2NDkwMTM0MiwiaXNzIjoiaHR0cHM6Ly9pc3N1ZXItc2VydmljZS5leGFtcGxlLmNvbSIsImF1ZCI6Imh0dHBzOi8vaXNzdWVyLXNlcnZpY2UuZXhhbXBsZS5jb20ifQ.Kt-SbnKU9S7BbCvHVsgCU3KnUYvekrFQCRRjYSlbGC0

token_typestringRequired

Token type (always "Bearer")

Example: Bearer

expires_innumber · doubleRequired

Token expiration time in seconds

Example: 3600

400

Bad Request - Invalid or missing authorization code

application/json

404

Not Found - Authorization request not found

application/json

500

Server Error

application/json

post

/api/v1/tokens

HTTPcURLJavaScriptPython

POST /api/v1/tokens HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 67

{
  "authorization_code": "AF3DiOZy_x1jF9mKJqUwN5JDnpxk0GlwJMdfQOiAbc"
}

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJkaWQ6ZW1wZToweDEyMzQ1Njc4OTBhYmNkZWYiLCJpYXQiOjE2NjQ4OTc3NDIsImV4cCI6MTY2NDkwMTM0MiwiaXNzIjoiaHR0cHM6Ly9pc3N1ZXItc2VydmljZS5leGFtcGxlLmNvbSIsImF1ZCI6Imh0dHBzOi8vaXNzdWVyLXNlcnZpY2UuZXhhbXBsZS5jb20ifQ.Kt-SbnKU9S7BbCvHVsgCU3KnUYvekrFQCRRjYSlbGC0",
  "token_type": "Bearer",
  "expires_in": 3600
}