OAuthTokenResponse

Access token issued by the token endpoint

token_typestringrequired

Type of the token: always Bearer

Example: Bearer

expires_inintegerrequired

Lifetime of the token, in seconds

Example: 600

access_tokenstringrequired

Access token, a JWT signed with the keys of GET /.well-known/jwks.json: send it in the Authorization: Bearer header

Example: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9…

scopestringrequired

Space-separated list of the granted scopes

Example: purchases:read purchases:write

audiencestringrequired

Audience of the token: api-public for the public API, api-internal for the internal one

Example: api-public

OAuthTokenResponse

{
  "token_type": "Bearer",
  "expires_in": 600,
  "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9…",
  "scope": "purchases:read purchases:write",
  "audience": "api-public"
}