Get the access token.

The grant type.

A space-delimited list of scopes that are associated with generated access token.

The authorization code. It is only required for "authorization_code" grant type.

The code verifier. This is used to verify the code challenge that was sent at the authorize endpoint. Required if the OIDC client is configured to require proof key for code exchange (PKCE)

The redirect URI. It is only required for "authorization_code" grant type.

The refresh token. It is only required for "refresh_token" grant type.

The user credential of resource owner. It is only required for "password" grant type.

The password credential of resource owner. It is only required for "password" grant type.

The token identifying the subject for a token exchange flow.

The token type of the subject_token.

The token identifying the acting party in a token exchange flow.

The type of token that should be returned as part of the token exchange flow.

Signed and/or encrypted JWT-bearer assertion. It is only required for "urn:ietf:params:oauth:grant-type:jwt-bearer" grant type.

Device verification code. Only required for "urn:ietf:params:oauth:grant-type:device_code" grant type.

The OIDC client ID that is required when the basic authorization header is not set.

The OIDC client secret that is required when the basic authorization header is not set and the client is not a public client.

The JWT assertion being used to authenticate the client.

The format of client assertion.

The basic authorization header that contains a base64-encoded client ID and the client secret. Use this header as an alternative to sending the client ID and secret in the form parameters.