Retrieve OAuth Application Authorization Code

Overview

Complete the authorization request by retrieving the authorization code using the request ID and nonce from the previous step.

Retrieve OAuth Application Authorization Code

Endpoint: POST /oauth-application/retrieve-authorization-code

Authentication: Required (Basic authentication using client_id and client_secret)

Header:

Authorization: Basic {btoa(client_id + ':' + client_secret)}

Request Parameters

Parameter	Type	Required	Description
`id`	string	Yes	The request ID returned from the authorization code request
`nonce`	string	Yes	Must match the nonce used in the authorization request

Response Fields

Field	Description
`clientId`	The OAuth Application's client ID
`nonce`	The nonce value used for this authorization flow
`authorizationCode`	The authorization code to exchange for an access token
`expiresAt`	ISO 8601 timestamp when the authorization code expires

Use Case

This endpoint completes the authorization flow initiated by the request authorization code endpoint. The OAuth Application must authenticate using Basic authentication (client ID and secret encoded in base64) and provide both the request id and the matching nonce. The returned authorization code is temporary and must be exchanged for an access token before it expires.

The nonce must exactly match the value used in the authorization request
The authorization code is single-use and expires at the specified timestamp
Basic authentication format: Basic base64(client_id:client_secret)

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

application/json

Body

Example

{
    "clientId": "example_client_id",
    "nonce": "example_nonce",
    "authorizationCode": "example_authorization_code",
    "expiresAt": "2025-02-10T10:03:06+00:00"
}

Retrieve OAuth app authorization code

Retrieve OAuth Application Authorization Code

Overview