Authorization Code Mode

ダウンロード

フォーカスモード

フォントサイズ

最終更新日: 2026-08-26 15:36:23

AI翻訳

API Description
After obtaining the code returned by the authentication portal via the standard authorization code mode, the application system calls this API to obtain the Access Token and ID Token, thereby completing the login.
Supported Application Types
Web applications, single-page applications, and mobile apps.
Request Method
POST
Request path
/oauth2/token
Request Content-Type
application/x-www-form-urlencoded
Request Example
POST /oauth2/token HTTP/1.1
Host: sample.portal.tencentciam.com
Content-Type: application/x-www-form-urlencoded
﻿
client_id=TENANT_CLIENT_ID&client_secret=TENANT_CLIENT_SECRET&grant_type=authorization_code&code=MOCK_CODE&redirect_uri=https%3A%2F%2Fexample.com%2Fcallback
Request Parameters
Parameter
No
Description
client_id
false
The application's client_id. It must match the one used when authorization is obtained.
client_secret
false
The application's client_secret. You can refer to the "client_secret" on the Application Management page by selecting the specific application and clicking Application Configuration.
grant_type
false
Enter the fixed value authorization_code.
code
false
The authorization code returned when authorization is obtained.
redirect_uri
false
The redirect address after successful authorization. It must match the address specified when authorization is obtained.
Normal Response Example
HTTP/1.1 200 OK
Content-Type: application/json;charset=UTF-8
﻿
{
  "access_token" : "eyJraWQiOiJkNDliYzUwNS01NTcyLTRlZDYtOWU0OC0zODhjM2Q0NGJiNDYiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJNT0NLX1VTRVJOQU1FIiwiYXVkIjoiVEVOQU5UX0NMSUVOVF9JRCIsIm5iZiI6MTYzNjQ0OTIzMiwic2NvcGUiOlsib3BlbmlkIl0sImlzcyI6Imh0dHBzOlwvXC9URU5BTlQuUE9SVEFMLkRPTUFJTiIsImV4cCI6MTYzNjQ0OTUzMiwiaWF0IjoxNjM2NDQ5MjMyLCJqdGkiOiJmYmM0NWQ3NS1lYmRjLTQzNjUtOWU0MS01YWM1OTg5ZDdhZTIifQ.SnBaXHhZ0jz3sbo-FPcO91YJn2LqOAuBxWTFRdIzl-PChdh4oXdaxmlWlcaLPU-niBo9TqAAmeocnomkTgt6TS2hp5IOjX8FihshlgVdagQNYM6__Zr5NHw9DH2zEps0AGA_7pyGg9trbcRBkjb2xRLyJpQ5lPkpGiNKA18SfCcsBBoy9E69wrZCZaKo3Y6iHO9v5qxlOTchajR5FI5VDZlxDLX9H3njf3C-KG5NlB7VQZBa0O4TZJm6od_sh8eCmCa5TKF7s5Zhw7JU83JfEh76WKT3rD5uEb4SbFhBGP3hL7Xsj3SJMP7nA4LlQAlINWyFzntAIuJ1VryH3JmQCg",
  "refresh_token" : "Ugvo1lO7Se8vvIPrIOwn_eBe0hoi5-5ynR3H-aFYl0e1Gej-SfUAaBDBXkWmojm_Q7utcpwz_swzLZwGGz_I5wHAkB6iaepCX3LvqZGvt5hmMXDCt3wZY3SnhridZC85",
  "scope" : "openid",
  "id_token" : "eyJraWQiOiJkNDliYzUwNS01NTcyLTRlZDYtOWU0OC0zODhjM2Q0NGJiNDYiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJNT0NLX1VTRVJOQU1FIiwiYXVkIjoiVEVOQU5UX0NMSUVOVF9JRCIsImF6cCI6IlRFTkFOVF9DTElFTlRfSUQiLCJpc3MiOiJodHRwczpcL1wvVEVOQU5ULlBPUlRBTC5ET01BSU4iLCJleHAiOjE2MzY0NTEwMzIsImlhdCI6MTYzNjQ0OTIzMiwianRpIjoiMDBlOWQxMjYtYmJkYi00ZjgzLWI4NTYtNTAyYjI0OWJmNjVmIn0.enLzJ-pJlnKpFCBR0gQc7bJH2GA1q_PpqWNjxJuTE1rWuQzvH9Y0oNNi-Wc1vUQ1u0hPSAC7in4E8vUpWDuDFyXrKWvwNxxj5uyLfFrAc2hnrju0ZUOT58lOqYd0Y48hA6THuxm9aA_EuOHvR3SxIS0cj_O5xJCwvhSqGUldRXGVgB4yMXXvZWkxWm5Q3B_hJc8aZtLpmo76-AKTz2OQouZ5bDE3WD89THuKN4mVxygyyIGTgpuIeyP1x14aTgvNKp2N-HGRoUwCzks_fLMcxmH5vqkI5alMi-XDfG8LWWhObM9j54oShSTpkok51B9VGTTOwbK4ZXeVRI48sCxWmg",
  "token_type" : "Bearer",
  "expires_in" : 299
}
Note:
 IDSEC returns the ID Token in JWT format. To decrypt and validate the ID Token, see the OIDC official documentation. Alternatively, you can directly use relevant development libraries to complete the decryption and validation. The public key required for validation is obtained by calling the Get JWT Public Key API.
Response Parameters
Parameter
Data Type
Description
access_token
String
OAuth 2.0 Access Token (JWT).
token_type
String
The Token type is currently set to the fixed value Bearer.
expires_in
Number
The validity period of the Access Token, in seconds.
scope
String
The Scope of the Access Token.
refresh_token
String
OAuth 2.0 Refresh Token.
id_token
String
OIDC ID Token (JWT).
Note:
 IDSEC returns the ID Token in JWT format. To decrypt and validate the ID Token, see the OIDC official documentation. Alternatively, you can directly use relevant development libraries to complete the decryption and validation. The public key required for validation is obtained by calling the Get JWT Public Key API.
Exception Response Example
The client_id parameter is missing or incorrect.
HTTP/1.1 401 Unauthorized
The client_id does not match the one used when authorization and the Token are obtained.
HTTP/1.1 401 Unauthorized
Content-Type: application/json;charset=UTF-8
﻿
{
"error" : "invalid_client"
}
The grant_type parameter is incorrect.
HTTP/1.1 400 Bad Request
Content-Type: application/json;charset=UTF-8
﻿
{
"error" : "unsupported_grant_type",
"error_description" : "OAuth 2.0 Parameter: grant_type",
"error_uri" : "https://datatracker.ietf.org/doc/html/rfc6749#section-5.2"
}
The code parameter is incorrect.
HTTP/1.1 400 Bad Request
Content-Type: application/json;charset=UTF-8
﻿
{
"error" : "invalid_grant"
}
﻿

ヘルプとサポート

この記事はお役に立ちましたか？

営業担当者にお問い合わせいただくかチケットを提出してサポートを求めることができます。

フィードバック

tencent cloud

Tencent OneID Identity Security

Authorization Code Mode

API Description

Supported Application Types

Request Method

Request path

Request Content-Type

Request Example

Request Parameters

Normal Response Example

Response Parameters

Exception Response Example

ヘルプとサポート

Parameter	No	Description
client_id	false	The application's `client_id`. It must match the one used when authorization is obtained.
client_secret	false	The application's `client_secret`. You can refer to the "client_secret" on the Application Management page by selecting the specific application and clicking Application Configuration.
grant_type	false	Enter the fixed value `authorization_code`.
code	false	The authorization code returned when authorization is obtained.
redirect_uri	false	The redirect address after successful authorization. It must match the address specified when authorization is obtained.

Parameter	Data Type	Description
access_token	String	OAuth 2.0 Access Token (JWT).
token_type	String	The Token type is currently set to the fixed value `Bearer`.
expires_in	Number	The validity period of the Access Token, in seconds.
scope	String	The Scope of the Access Token.
refresh_token	String	OAuth 2.0 Refresh Token.
id_token	String	OIDC ID Token (JWT).