POST
request to the Nxsys token endpoint with the required parameters in the request body.POST {{nxsys_base_api_url}}/nxsys/oauth/token
Content-Type: application/x-www-form-urlencoded
Parameter | Required | Description |
---|---|---|
grantType | Yes | Set to authorization_code . |
code | Yes | The authorization code from the previous step. |
clientId | Yes | Your application's client ID. |
clientSecret | Yes | Your application's client secret. |
redirectUri | Yes | The redirect URI used in the authorization request. |
POST
request to the token endpoint. Below is an example using cURL:
YOUR_AUTHORIZATION_CODE
, YOUR_CLIENT_ID
, etc.) with your actual values.{
"accessToken": "YOUR_ACCESS_TOKEN",
"tokenType": "Nxsys-oauthtoken",
"expiresIn": 3600,
"refreshToken": "YOUR_REFRESH_TOKEN"
}
Field | Description |
---|---|
accessToken | Token used to authenticate API requests. |
tokenType | Type of token, set to Nxsys-oauthtoken . |
expiresIn | Duration (in seconds) until the access token expires. |
refreshToken | Token used to obtain a new access token upon expiration. |
accessToken
and refreshToken
. Avoid exposing them in client-side code, public repositories, or unsecured environments.Authorization
header of your requests:Authorization: Nxsys-oauthtoken YOUR_ACCESS_TOKEN
YOUR_ACCESS_TOKEN
with the actual token received from the response.