cURL
curl --request POST \ --url https://api.casexchange.com/api/v1/oauth/token \ --header 'Authorization: Basic <encoded-value>' \ --header 'Content-Type: application/x-www-form-urlencoded' \ --data grant_type=authorization_code \ --data 'code=<string>' \ --data 'redirect_uri=<string>' \ --data 'client_id=<string>' \ --data 'client_secret=<string>' \ --data 'code_verifier=<string>'
{ "access_token": "<string>", "token_type": "Bearer", "expires_in": 123, "refresh_token": "<string>", "scope": "<string>", "id_token": "<string>" }
Exchange authorization codes or refresh tokens
Client ID and secret for OAuth token endpoints
authorization_code
PKCE code verifier (required if code_challenge was provided)
Token response
Bearer
OpenID Connect ID token (if openid scope requested)