Get token

post

https://xs2a-sandbox.triodos.com/auth/{tenant}/v1/token

To obtain an Access Token and a Refresh Token, the RP (Client) sends a Token Request to the Token Endpoint to obtain a Token Response, as described in Section 3.2 of OAuth 2.0.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Path Params

tenant

string

enum

required

Branch of the request.

Allowed:

Body Params

redirect_uri

string

Must be identical to the "redirect_uri" parameter that was included in the authorization request. Not needed when requesting a refresh token.

code

string

The authorization code received from the authorization server. Not needed when requesting a refresh token.

refresh_token

string

The refresh token received from the authorization server. Not needed when using an authorization code.

grant_type

string

enum

required

Specify "authorization_code" when an authorization code is provided or "refresh_token" when a refresh token is provided.

Allowed:

code_verifier

string

Client provided code verifier for additional challenge-response verification, see RFC7636 for more information. Not needed when requesting a refresh token.

Headers

Authorization

string

required

Client secret basic authentication.

Responses

400

unsupported_grant_type, invalid_request, invalid_grant or unauthorized_client

200After receiving and validating a valid and authorized Token Request from the Client, the Authorization Server returns a successful response that includes an ID Token, an Access Token and a Refresh Token.