curl https://api.thanxsandbox.com/oauth/token \
-X POST \
-H "Content-Type: application/json" \
-d '{
"grant_type": "authorization_code",
"client_id": "${client_id}",
"client_secret": "${client_secret}",
"code": "${code}",
"redirect_uri": "https://www.example.com/oauth/callback"
}'
{
"token_type": "Bearer",
"scope": "passwordless",
"created_at": 1577836800,
"access_token": "945148251b603ae34561d90acfe4050e67494d6d1e65d4d3d52798407f03c0bd",
"refresh_token": "c74334301a7c74d21b714c905fd3047177dab56de6a86899e6f6b7f71bab7d55"
}
{
"error": "invalid_grant",
"error_description": "The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client."
}
SSO
Acquire Access Token
Use this endpoint to acquire a user’s access token.
POST
/
oauth
/
token
curl https://api.thanxsandbox.com/oauth/token \
-X POST \
-H "Content-Type: application/json" \
-d '{
"grant_type": "authorization_code",
"client_id": "${client_id}",
"client_secret": "${client_secret}",
"code": "${code}",
"redirect_uri": "https://www.example.com/oauth/callback"
}'
{
"token_type": "Bearer",
"scope": "passwordless",
"created_at": 1577836800,
"access_token": "945148251b603ae34561d90acfe4050e67494d6d1e65d4d3d52798407f03c0bd",
"refresh_token": "c74334301a7c74d21b714c905fd3047177dab56de6a86899e6f6b7f71bab7d55"
}
{
"error": "invalid_grant",
"error_description": "The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client."
}
This same endpoint supports refreshing an access token using the
client_id,
client_secret, and refresh_token, with grant_type set to refresh_token.
Parameters
Response
curl https://api.thanxsandbox.com/oauth/token \
-X POST \
-H "Content-Type: application/json" \
-d '{
"grant_type": "authorization_code",
"client_id": "${client_id}",
"client_secret": "${client_secret}",
"code": "${code}",
"redirect_uri": "https://www.example.com/oauth/callback"
}'
{
"token_type": "Bearer",
"scope": "passwordless",
"created_at": 1577836800,
"access_token": "945148251b603ae34561d90acfe4050e67494d6d1e65d4d3d52798407f03c0bd",
"refresh_token": "c74334301a7c74d21b714c905fd3047177dab56de6a86899e6f6b7f71bab7d55"
}
{
"error": "invalid_grant",
"error_description": "The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client."
}