Token Endpoint

Token Endpoint provides tokens according to OAuth 2.0/OIDC 1.0 (RFC-6749) specifications and its extension OAuth 2.0 Token Exchange (RFC-8693).

POST /oauth/token

Token Endpoint

cURL

curl --request POST \
  --url https://eu.phrase.com/idm/oauth/token \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data 'grant_type=<string>' \
  --data 'subject_token=<string>' \
  --data 'resource=<string>' \
  --data 'audience=<string>' \
  --data 'scope=<string>' \
  --data requested_token_type=urn:ietf:params:oauth:token-type:access_token \
  --data subject_token_type=urn:phrase:params:oauth:token-type:api_token \
  --data 'actor_token=<string>' \
  --data 'actor_token_type=<string>'

200

{
  "access_token": "<string>",
  "issued_token_type": "<string>",
  "token_type": "<string>",
  "expires_in": 123
}

Body

application/x-www-form-urlencoded

grant_type · string · required

Type of grant for access token

subject_token · string · required

Token of the subject

resource · string

Target resource URI (not supported)

audience · string

Logical name of the target service (not supported)

scope · string

space-delimited, case-sensitive list of requested grants (not supported)

requested_token_type · string · default: urn:ietf:params:oauth:token-type:access_token

Token type requested

subject_token_type · string · default: urn:phrase:params:oauth:token-type:api_token

Type of the token (not supported)

actor_token · string

Acting party token (not supported)

actor_token_type · string

Type of the actor token (not supported)

Response

200

application/json

Token is issued to the caller

access_token · string · required

Access token for oauth

issued_token_type · string · required

Type of the access_token (RFC-8693)

token_type · string · required

Token type - defines how the token should be used

expires_in · integer · required

Number of seconds the access token is valid