Exchange code (PKCE) or refresh_token for tokens

POST

https://api.pibox.com/api/v2/oauth/token

Request

Body Params application/x-www-form-urlencodedRequired

Responses

🟢200OK

application/json

Tokens

Bodyapplication/json

🟠400Bad Request

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://api.pibox.com/api/v2/oauth/token' \
--data-urlencode 'grant_type=' \
--data-urlencode 'code=' \
--data-urlencode 'redirect_uri=' \
--data-urlencode 'client_id=' \
--data-urlencode 'code_verifier=' \
--data-urlencode 'refresh_token='

Response Example

200 - Example 1

{
    "access_token": "string",
    "token_type": "bearer",
    "expires_in": 0,
    "refresh_token": "string",
    "scope": "string"
}

Modified at 2026-08-05 12:46:23

Confirm consent (api_token bridge) → 302 with code

Revoke an access or refresh token (RFC 7009)