OAuthTokenResponseDto

Example

JSON

{
  "access_token": "string",
  "id_token": "string",
  "token_type": "Bearer",
  "expires_in": 0,
  "refresh_token": "string",
  "scope": "openid profile email"
}

Properties

6 properties 5 required

access_token string Required

Access token (RS256 JWT)

id_token string Optional

OpenID Connect ID token. Issued on the `authorization_code` grant only.

token_type string Required

ExampleBearer

expires_in number Required

Access token lifetime in seconds

refresh_token string Required

Refresh token. Rotates on every use: the one presented stops working.

scope string Required

The scopes the tokens were granted, space-separated (RFC 6749 §5.1). On a refresh it can be narrower than the original grant: a scope taken off the client since is not carried into the new pair.

Exampleopenid profile email

Was this page helpful?

Tell us how we can improve this guide.