# Token Exchange

`POST /oauth/oidc/token`

Exchange an authorization code for tokens, or refresh an existing token.

### Authorization Code Grant
Exchange the authorization code received from the callback for an access token, ID token, and refresh token. Requires the original PKCE `code_verifier`.

### Refresh Token Grant
Use a refresh token to obtain a new access token.

Parameters, request body, responses and error codes for this
endpoint are generated from the OpenAPI description. Read it at
/dist/docs/openapi.yaml for the machine-readable version.