API ReferenceApplications
POST
/oauth2/v1/token

Request Body

application/json

grant_type?string
code?string
redirect_uri?string
client_id?string
client_secret?string
code_verifier?string
refresh_token?string
scope?string
ssoAppId?string
audience?string
username?string
password?string
assertion?string
client_assertion_type?string
client_assertion?string
device_code?string
project_id?string

OIDC token endpoint

curl -X POST "https://api.descope.com/oauth2/v1/token" \  -H "Content-Type: application/json" \  -d '{}'
{  "access_token": "string",  "token_type": "string",  "refresh_token": "string",  "id_token": "string",  "expires_in": 0,  "scope": "string",  "error": "string",  "description": "string",  "issued_token_type": "string",  "authorization_details": {    "values": [      null    ]  }}
export interface Response {access_token?: stringtoken_type?: stringrefresh_token?: stringid_token?: stringexpires_in?: numberscope?: string/** * Those fields are in use just in case of error of device flow scenario (where device polling on the specific error response) */error?: stringdescription?: stringissued_token_type?: stringauthorization_details?: GoogleProtobuf}/** * `ListValue` is a wrapper around a repeated field of values. *  *  The JSON representation for `ListValue` is JSON array. */export interface GoogleProtobuf {/** * Repeated field of dynamically typed values. */values?: {[k: string]: unknown}[]}
Was this helpful?

Select Tenant for OAuth Tokens POST

Select the active tenant for a user that authenticated through a federated (OAuth/OIDC) application. Send the refresh token returned from the OAuth token endpoint as the bearer token, along with the application client_id and the tenant to select. Returns a new set of OIDC-compliant tokens (access, refresh and ID tokens) with the selected tenant as the dct claim, minted with the application's JWT template and session settings and preserving the originally granted scopes. The user must be a member of the selected tenant, and subsequent calls should use the newly returned refresh token

OIDC UserInfo GET

OIDC Get UserInfo endpoint