Flow Signin With PKCE - POST Authorize Client
After user logs in, the server redirects with authorization_code. The client then sends this code along with the code_verifier to get an access_token. This is where the PKCE check happens.
http://iot-auth.test/oauth/tokenParameter
| Field | Type | Description |
|---|---|---|
| client_id | Text |
Identifies your app to the OAuth server |
| redirect_url | Text |
Where the auth server sends the user after approval. |
| grant_type | Text |
Fill with the authorization code |
| code | Text |
From URL callback code |
| code_verifier | Text |
Give the verification code |
{
"access_token": "eyJhbGciOi...",
"token_type": "Bearer",
"expires_in": 3600,
"refresh_token": "def50200..."
}