ApiAuth_clusters
Exchange a proxy-minted authorization code for the upstream tokens
POST
RFC 6749 §4.1.3 token endpoint. If the cluster is not found, disabled, or discovery is not enabled, return 404.
ns*stringNamespace containing the cluster.
cluster*stringCluster name that should exist in the namespace.
application/x-www-form-urlencoded- body
The token request, form-encoded (RFC 6749 §4.1.3 and §6).
code*stringThe proxy-minted code returned by /oauth/callback.
code_verifier*stringRFC 7636 PKCE verifier for the code_challenge presented at /oauth/authorize.
grant_type*stringMust be authorization_code; this server only implements that grant.
redirect_uri*stringMust match the redirect_uri presented at /oauth/authorize (RFC 6749 §4.1.3).
The tokens for the cluster: access, ID and refresh.
application/json- response
A successful token response (RFC 6749 §5.1).
access_token*stringexpires_in?|Format
int64id_token*stringrefresh_token?string|nullscope*stringtoken_type*stringcurl -X POST 'https://example.com/clusters/string/string/oauth/token' \ -H 'Content-Type: application/x-www-form-urlencoded' \ -d 'code=string&code_verifier=string&grant_type=string&redirect_uri=string'Example Response
{ "access_token": "string", "expires_in": 0, "id_token": "string", "refresh_token": "string", "scope": "string", "token_type": "string"}