curl --request POST \
--url https://public-api.sessionboard.com/oauth/token \
--header 'Content-Type: application/json' \
--data '
{
"grant_type": "authorization_code",
"code": "<string>",
"redirect_uri": "<string>",
"client_id": "<string>",
"code_verifier": "<string>"
}
'{
"access_token": "<string>",
"token_type": "Bearer",
"expires_in": 3600,
"refresh_token": "<string>",
"scope": "<string>"
}Exchange an authorization code for access and refresh tokens (authorization_code grant), or refresh an expired access token (refresh_token grant). Uses PKCE verification — no client secret required.
curl --request POST \
--url https://public-api.sessionboard.com/oauth/token \
--header 'Content-Type: application/json' \
--data '
{
"grant_type": "authorization_code",
"code": "<string>",
"redirect_uri": "<string>",
"client_id": "<string>",
"code_verifier": "<string>"
}
'{
"access_token": "<string>",
"token_type": "Bearer",
"expires_in": 3600,
"refresh_token": "<string>",
"scope": "<string>"
}