Skip to main content
POST
Token Endpoint

Authorizations

Authorization
string
header
required

EdDSA-signed JWT obtained via OAuth 2.1 client_credentials or CIBA

Response

Default Response

access_token
string
required

EdDSA-signed JWT

token_type
enum<string>
required
Available options:
Bearer
expires_in
integer
required

Token lifetime in seconds

scope
string

Space-separated list of granted scopes

refresh_token
string
id_token
string

OIDC ID token (if openid scope was granted)