Token Issuance & Refresh

curl --request POST \
  --url 'https://oauth.msu.io/oauth/token' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --header 'Authorization: Basic base64({CLIENT_ID}:{CLIENT_SECRET})' \
  --data 'grant_type=authorization_code&code={AUTHORIZATION_CODE}&redirect_uri={REDIRECT_URI}'

curl --request POST \
  --url 'https://oauth.msu.io/oauth/token' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --header 'Authorization: Basic base64({CLIENT_ID}:{CLIENT_SECRET})' \
  --data 'grant_type=refresh_token&refresh_token={REFRESH_TOKEN}'

const response = await fetch('https://oauth.msu.io/oauth/token', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/x-www-form-urlencoded',
    'Authorization': `Basic ${btoa('{CLIENT_ID}:{CLIENT_SECRET}')}`
  },
  body: new URLSearchParams({
    grant_type: 'authorization_code',
    code: '{AUTHORIZATION_CODE}',
    redirect_uri: '{REDIRECT_URI}'
  })
});
const data = await response.json();

import requests
import base64

credentials = base64.b64encode(b'{CLIENT_ID}:{CLIENT_SECRET}').decode()

response = requests.post(
  'https://oauth.msu.io/oauth/token',
  headers={
    'Content-Type': 'application/x-www-form-urlencoded',
    'Authorization': f'Basic {credentials}'
  },
  data={
    'grant_type': 'authorization_code',
    'code': '{AUTHORIZATION_CODE}',
    'redirect_uri': '{REDIRECT_URI}'
  }
)
data = response.json()

{
  "access_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6Im1zdS1vYXV0aCIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 600,
  "refresh_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6Im1zdS1vYXV0aCIsInR5cCI6IkpXVCJ9...",
  "scope": "enhancement"
}

POST

oauth

token

curl --request POST \
  --url 'https://oauth.msu.io/oauth/token' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --header 'Authorization: Basic base64({CLIENT_ID}:{CLIENT_SECRET})' \
  --data 'grant_type=authorization_code&code={AUTHORIZATION_CODE}&redirect_uri={REDIRECT_URI}'

curl --request POST \
  --url 'https://oauth.msu.io/oauth/token' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --header 'Authorization: Basic base64({CLIENT_ID}:{CLIENT_SECRET})' \
  --data 'grant_type=refresh_token&refresh_token={REFRESH_TOKEN}'

const response = await fetch('https://oauth.msu.io/oauth/token', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/x-www-form-urlencoded',
    'Authorization': `Basic ${btoa('{CLIENT_ID}:{CLIENT_SECRET}')}`
  },
  body: new URLSearchParams({
    grant_type: 'authorization_code',
    code: '{AUTHORIZATION_CODE}',
    redirect_uri: '{REDIRECT_URI}'
  })
});
const data = await response.json();

import requests
import base64

credentials = base64.b64encode(b'{CLIENT_ID}:{CLIENT_SECRET}').decode()

response = requests.post(
  'https://oauth.msu.io/oauth/token',
  headers={
    'Content-Type': 'application/x-www-form-urlencoded',
    'Authorization': f'Basic {credentials}'
  },
  data={
    'grant_type': 'authorization_code',
    'code': '{AUTHORIZATION_CODE}',
    'redirect_uri': '{REDIRECT_URI}'
  }
)
data = response.json()

{
  "access_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6Im1zdS1vYXV0aCIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 600,
  "refresh_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6Im1zdS1vYXV0aCIsInR5cCI6IkpXVCJ9...",
  "scope": "enhancement"
}

Issues a new Access Token and Refresh Token using an Authorization Code (authorization_code), or refreshes an expired Access Token using a Refresh Token (refresh_token).

Header parameters

string

required

Must be application/x-www-form-urlencoded.

string

required

Client credentials encoded in Base64: Basic base64({CLIENT_ID}:{CLIENT_SECRET}).

Body parameters

string

required

Token grant type. Must be authorization_code or refresh_token.

string

Required when grant_type=authorization_code. The Authorization Code received from /oauth/authorize.

string

Required when grant_type=authorization_code. Must exactly match the URI used in the Authorization Code request.

string

Required when grant_type=refresh_token. The Refresh Token to use for renewal.

string

PKCE code verifier. Required if a code_challenge was provided in the Authorization Code request.

Response

string

Access Token. Used as a Bearer token in API calls.

string

Token type. Always Bearer.

integer

Access Token validity period in seconds (600 seconds = 10 minutes).

string

Refresh Token. Used to renew the Access Token. Valid for 3 hours.

string

Space-separated list of granted permission scopes.

curl --request POST \
  --url 'https://oauth.msu.io/oauth/token' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --header 'Authorization: Basic base64({CLIENT_ID}:{CLIENT_SECRET})' \
  --data 'grant_type=authorization_code&code={AUTHORIZATION_CODE}&redirect_uri={REDIRECT_URI}'

curl --request POST \
  --url 'https://oauth.msu.io/oauth/token' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --header 'Authorization: Basic base64({CLIENT_ID}:{CLIENT_SECRET})' \
  --data 'grant_type=refresh_token&refresh_token={REFRESH_TOKEN}'

const response = await fetch('https://oauth.msu.io/oauth/token', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/x-www-form-urlencoded',
    'Authorization': `Basic ${btoa('{CLIENT_ID}:{CLIENT_SECRET}')}`
  },
  body: new URLSearchParams({
    grant_type: 'authorization_code',
    code: '{AUTHORIZATION_CODE}',
    redirect_uri: '{REDIRECT_URI}'
  })
});
const data = await response.json();

import requests
import base64

credentials = base64.b64encode(b'{CLIENT_ID}:{CLIENT_SECRET}').decode()

response = requests.post(
  'https://oauth.msu.io/oauth/token',
  headers={
    'Content-Type': 'application/x-www-form-urlencoded',
    'Authorization': f'Basic {credentials}'
  },
  data={
    'grant_type': 'authorization_code',
    'code': '{AUTHORIZATION_CODE}',
    'redirect_uri': '{REDIRECT_URI}'
  }
)
data = response.json()

{
  "access_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6Im1zdS1vYXV0aCIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 600,
  "refresh_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6Im1zdS1vYXV0aCIsInR5cCI6IkpXVCJ9...",
  "scope": "enhancement"
}

⌘I

MSU Builder

MSU Resources

MSU OPEN API

Header parameters

Body parameters

Response

​Header parameters

​Body parameters

​Response

Header parameters

Body parameters

Response