OAuth2
Grant Type.
Authorization code that the client previously received from the authorization server. Required when grant_type is authorization_code.
The redirect URI in the token request must be an exact match of the redirect URI that was used when generating the authorization code. Required for when grant_type is authorization_code.
Refresh token that the client previously received from the authorization server. Required when grant_type is refresh_token.
Client ID used for authentication.
Client Secret used for authentication, only used in Server-Side Apps
Code verifier(PKCE), only used in Mobile and Native Apps
Only used with the combination of client_credentials grant_type and client_assertion_type
Only used with the combination of client_credentials grant_type and client_assertion
Success
Access Tokens
Date and Time in ISO8601 format example: '2018-11-06T10:20:37.094533Z'
Date and Time in ISO8601 format example: '2018-11-06T10:20:37.094533Z'
Token type
List of scopes
Refresh token should be used after the access token is expired to fetch a new access token
Expiration time in seconds
Authorization Id could be used later on in authorization_changed Webhook
Access token
In BMW and MINI case, the status is pending until the car owner grants access in BMW ConnectedDrive Portal
Error
Server Errors
Access Token or Refresh Token that will be used in the revocation.
Client ID used for authentication.
Client Secret used for authentication, only used in Server-Side Apps
Token hint used to identify which type of token is inside the token property.
Success
No content
Error
Server Errors
No content
Bearer token
Success
Vehicle Info
VIN associated with the access token
sub associated with the access token
Error
Server Errors
Last updated
Was this helpful?