Generar un JWT

post/oauth2/token

Use this call:

To get a user JWT.
To refresh the JWT when it expires. Works only if scope=offline is passed in the registration or authentication call.
To get a server JWT. The user participation isn’t needed.
To exchange user JWT for a new one with different scope.

Usage of this call depends on the value of the grant_type parameter.

Request

Request Body schema: application/x-www-form-urlencoded

grant_type required	string The type of getting the JWT. Can be: `authorization_code` to exchange the code received in the authentication call to the JWT. The value of the `code` parameter must be specified. `refresh_token` to get the refreshed JWT when the previous value is expired. The value of the `refresh_token` parameter must be specified. `client_credentials` to get the server JWT. The values of the `client_id` and `client_secret` parameters must be specified. `urn:ietf:params:oauth:grant-type:token_exchange` to exchange existing user JWT with different scope.
client_id required	string Su ID de aplicación. El valor de este parámetro depende del valor del parámetro `grant_type`: Si es `authorization_code`, cree un cliente de OAuth 2.0 y utilice su ID de cliente. Si es `client_credentials`, póngase en contacto con sugestor del éxito del cliente para crear un cliente de OAuth 2.0 de servidor y obtener su ID de cliente. Tenga en cuenta que los valores de los parámetros `client_secret` y `client_id` deben utilizarse desde el mismo cliente.
refresh_token	string Valor de este parámetro recibido en la respuesta a la última solicitud de esta llamada con los valores `authorization_code` o `refresh_token` en el parámetro `grant_type`. Obligatorio si `grant_type=refresh_token`.
client_secret	string Su clave secreta. El valor de este parámetro depende del valor del parámetro `grant_type`: Si es `authorization_code`, cree un cliente de OAuth 2.0 y utilice su clave secreta. Obligatorio si creó un cliente de OAuth 2.0 con un tipo de autenticación confidencial. Si es `client_credentials`, contacte con su gestor del éxito del cliente para crear un cliente de OAuth 2.0 de servidor y obtener su clave secreta. Obligatorio para este tipo de cliente. Tenga en cuenta que los valores de los parámetros `client_secret` y `client_id` deben utilizarse desde el mismo cliente.
redirect_uri	string
code	string Código de autenticación que se intercambia por un JWT. Obligatorio si `grant_type=authorization_code`.
code_verifier	string El comprobador de código de la solicitud PKCE, que la aplicación generó originalmente antes de la solicitud de autorización.
audience	string Lista de dominios a los que se puede aplicar el token
scope	string A list of space-delimited, case-sensitive strings, as defined in Section 3.3 of [RFC6749], that allow the client to specify the desired scope of the requested security token in the context of the service or resource where the token will be used. The values and associated semantics of scope are service specific and expected to be described in the relevant service documentation
subject_token	string A security token that represents the identity of the party on behalf of whom the request is being made. Typically, the subject of this token will be the subject of the security token issued in response to the request.
subject_token_type	string A security token that represents the identity of the party on behalf of whom the request is being made. Typically, the subject of this token will be the subject of the security token issued in response to the request. Value: "access_token"
actor_token	string A security token that represents the identity of the acting party. Typically, this will be the party that is authorized to use the requested security token and act on behalf of the subject.
actor_token_type	string An identifier, as described in Section 3, that indicates the type of the security token in the actor_token parameter. This is REQUIRED when the actor_token parameter is present in the request but MUST NOT be included otherwise. Value: "server_token"

Responses

200

ACEPTAR

400

Bad Request (Solicitud errónea)

404

Not Found (No encontrado)

418

"I’m a teapot" (Soy una tetera)

422

Unprocessable Entity (Entidad no procesable)

429

Too Many Requests (Demasiadas solicitudes)

Request samples

application/x-www-form-urlencoded

refresh_token=string&grant_type=string&client_secret=string&client_id=string&redirect_uri=string&code=string&code_verifier=string&audience=string&scope=string&subject_token=string&subject_token_type=access_token&actor_token=string&actor_token_type=server_token

Response samples

application/json

{"access_token": "2YotnFZFEjr1zCsicMWpAA",
"expires_in": 3600,
"refresh_token": "tGzv3JOkF0XG5Qx2TlKWIA",
"scope": "email user_profile",
"token_type": "bearer"
}