- 01 Jul 2024
- 1 Minute to read
- Print
- DarkLight
OpenID Connect Token Request
- Updated on 01 Jul 2024
- 1 Minute to read
- Print
- DarkLight
Issue a POST to /idp/profile/oidc/token
with the following parameters.
Parameter | Type | Description |
---|---|---|
grant_type | String required | "authorization_code" |
code | String required | The value of the "code" parameter from the previous response. |
redirect_uri | String required | The registered callback URL Must match exactly the value used in the previous request. |
client_id | String optional | The OAuth 2.0 Client Identifier. This is required if HTTP Basic Authentication is not used. |
client_secret | String optional | The OAuth 2.0 Client Identifier. This is required if HTTP Basic Authentication is not used. |
As shown in the above table, HTTP Basic Authentication may be used instead of providing client_id and client_secret as request parameters. In that case the Client ID should be used as the username and the Client Secret should be used as the password.