Skip to main content

PasswordTokenRequest

Password Token Request is used when the application exchanges the user’s username and password for an access token. This grant type is suitable for first-party clients, such as those built into the device operating system or a highly-trusted application.

    grant_type

    string

    required

    Possible values: [CLIENT_CREDENTIALS, REFRESH_TOKEN, TOKEN_EXCHANGE, PASSWORD]

    It is used in token requests to specify the type of authorization grant being utilized. The acceptable values are:

    • client_credentials: client credentials grant type

    • refresh_token: refresh token grant type

    • urn:ietf:params:oauth:grant-type:token-exchange: token exchange grant type

    • password: resource owner password (or "password") grant type

    scope string

    The scope of the requested access token. Can be used to restrict the new access token to a subset of the scope allowed to the client and token type.

    username stringrequired

    The username that is assigned to the user's account.

    password stringrequired

    The password that is associated with the user's account.

    scope string

    The scope of the requested access token. Can be used to restrict the new access token to a subset of the scope allowed to the client and token type.

    digital_fingerprint stringrequired

    Unique identifier assigned to individual users or devices, used to create their digital identity.