Token Endpoint

POST

/oauth/token

Exchange authorization code for access tokens, or refresh an existing token.

Step 7-8 of the OAuth flow - Marketplace server calls this endpoint.

Authorization Code Grant

Refresh Token Grant

Response

{
  "access_token": "token_here",
  "token_type": "Bearer",
  "expires_in": 3600,
  "refresh_token": "refresh_token_here",
  "scope": "data.share.sales credit.score.read"
}

Token Lifetimes

Token	Lifetime
Access Token	1 hour
Refresh Token	30 days
Authorization Code	5 minutes

Request

Body Params application/jsonRequired

Examples

Responses

🟢200

application/json

Token response

Body

🟠400

🟠401

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST 'https://api.dev.opensylo.com/oauth/token' \
--header 'Content-Type: application/json' \
--data-raw '{
    "grant_type": "authorization_code",
    "code": "string",
    "client_id": "string",
    "client_secret": "string",
    "redirect_uri": "string",
    "refresh_token": "string",
    "code_verifier": "string"
}'

Response Example

{
    "access_token": "string",
    "token_type": "Bearer",
    "expires_in": 3600,
    "refresh_token": "string",
    "scope": "string"
}

Modified at 2025-12-30 08:04:15

Process Authorization Decision

Revoke Token

Token Endpoint

Authorization Code Grant#

Refresh Token Grant#