Oauth
Token Issuance & Refresh
Issue a new Access Token and Refresh Token using an Authorization Code, or refresh an expired Access Token using a Refresh Token.
POST
Issues a new Access Token and Refresh Token using an Authorization Code (
authorization_code), or refreshes an expired Access Token using a Refresh Token (refresh_token).
Header parameters
Must be
application/x-www-form-urlencoded.Client credentials encoded in Base64:
Basic base64({CLIENT_ID}:{CLIENT_SECRET}).Body parameters
Token grant type. Must be
authorization_code or refresh_token.Required when
grant_type=authorization_code. The Authorization Code received from /oauth/authorize.Required when
grant_type=authorization_code. Must exactly match the URI used in the Authorization Code request.Required when
grant_type=refresh_token. The Refresh Token to use for renewal.PKCE code verifier. Required if a
code_challenge was provided in the Authorization Code request.Response
Access Token. Used as a Bearer token in API calls.
Token type. Always
Bearer.Access Token validity period in seconds (600 seconds = 10 minutes).
Refresh Token. Used to renew the Access Token. Valid for 3 hours.
Space-separated list of granted permission scopes.

