Authorization Code com PKCE

Authorization Request

GET /oauth2/authorize?client_id={client_id}&response_type=code&redirect_uri={redirect_uri}&scope={scope}&code_challenge={code_challenge}&code_challenge_method=S256 HTTP/1.1
Host: id.btgpactual.com

Authorization Response

HTTP/1.1 302 Found
Location: {redirect_uri}?code={authorization_code}&iss=https%3A%2F%2Fid.btgpactual.com

Token Request

POST /oauth2/token HTTP/1.1
Host: id.btgpactual.com
Content-type: application/x-www-form-urlencoded

client_id={client_id}&code={authorization_code}&redirect_uri={redirect_uri}&grant_type=authorization_code&code_verifier={code_verifier}

Token Response

HTTP/1.1 200 OK
Content-Type: application/json

{"access_token":"<exemplo-access-token>","refresh_token":"<exemplo-refresh-token>","scope":"apps email openid profile webhooks","id_token":"<exemplo-id-token>","token_type":"Bearer","expires_in":86400}

HTTP/1.1 200 OK
Content-Type: application/json

{"access_token":"<exemplo-access-token>","refresh_token":"<exemplo-refresh-token>","scope":"apps email openid profile webhooks","id_token":"<exemplo-id-token>","token_type":"Bearer","expires_in":86400}