Token issuance URL requirements

This section describes requirements for your token issuance endpoint (RFC 6749#section-3.2):

  • You must set the Content-Type header to application/json
  • You should specify the OAuth2 access token expiration via the expires_in property, in seconds.
  • If your access tokens do not expire, set the OAuth2 access to a value of 0 (zero).

Example Response Body:

HTTP/1.1 200 OK
Content-Type: application/json;charset=UTF-8

{
    "access_token":"123abcdefg",
    "token_type": "bearer",
    "expires_in": "86400"
}