Exchange OAuth code for session token

Public endpoint used by OAuth clients to exchange a one-time authorization code for a scoped bearer session token.
Enforces PKCE binding.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Exchanges a one-time authorization code for an OAuth bearer session token.

string
enum
required
Defaults to authorization_code

Authorization grant type.

Allowed:
string
required
length ≥ 1

One-time authorization code from consent redirect.

string
required

Identifier of the OAuth client application that initiated the authorization request.

string
required
length between 43 and 128
^[A-Za-z0-9\-._~]+$

PKCE verifier for code challenge validation.

Responses

Language
Credentials
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json