Exchange OAuth code for session token

Public endpoint used by OAuth clients to exchange a one-time authorization code for a scoped bearer session token. Enforces PKCE binding.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Exchanges a one-time authorization code for an OAuth bearer session token.

string
enum
required
Defaults to authorization_code

Authorization grant type.

Allowed:
string
required
length ≥ 1

One-time authorization code from consent redirect.

string
required

Identifier of the OAuth client application that initiated the authorization request.

string
required
length between 43 and 128

PKCE verifier for code challenge validation.

Responses

Language
Credentials
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json