Exchange token

POST

/session/oauth/token

Auth: None

Exchange a token pair with OAuth code.

Request

Authorization

Add the parameter

Authorization

to Headers，whose value is to concatenate the Token after the Bearer.

Example:

Authorization: Bearer ********************

Body Params application/x-www-form-urlencodedRequired

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location --request POST '/session/oauth/token' \
--header 'Authorization: Bearer <token>' \
--data-urlencode 'client_id=393a1839-f52e-498e-9972-e77cc2241eee' \
--data-urlencode 'client_secret=' \
--data-urlencode 'grant_type=' \
--data-urlencode 'code=authorization_code' \
--data-urlencode 'code_verifier='

Responses

🟢200Success

application/json

Body

Example

{
        "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwic3ViIjoibHB1YSIsImV4cCI6MTc0NTY1NDMwOCwibmJmIjoxNzQ1NjUwNzA4fQ.n2z8AY-A9GC-CymOsLSA8ruV3vYgNJd27MXRcm4bVu8",
        "token_type": "Bearer",
        "expires_in": 3600,
        "refresh_token_expires_in": 7776000,
        "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbl90eXBlIjoicmVmcmVzaCIsInN1YiI6ImxwdWEiLCJleHAiOjE3NjEyMDI3MDgsIm5iZiI6MTc0NTY1MDcwOCwic3RhdGVfaGFzaCI6Ikk1OCtSbmsrTHVpTkxBbjBqek9KNG45OUorV3hqL0pzbjJoRVYrUXBhelE9In0.KoechX6_A2NeVcfFAlHkRLk572hjPKepP0XWfbvBxZY",
        "scope": "openid offline_access File.Read"
}

Modified at 2026-01-31 05:01:47

Get OAuth app info

Revoke authorization