Skip to main content
POST
Exchange authorization code for user info

Authorizations

Authorization
string
header
required

Marketplace API key

Headers

X-Organization-Id
string
required

Target clinic organization ID

Body

application/json
grant_type
string
required

Must be 'authorization_code'

Example:

"authorization_code"

code
string
required

The authorization code received from the callback

Example:

"d4d9cccb37643c5913fe649d1880889a..."

redirect_uri
string
required

Must match the redirect_uri used in the authorize request

Example:

"https://myapp.com/auth/callback"

Response

Token exchange successful

id_token
string
required

OIDC id_token (ES256-signed JWT)

Example:

"eyJhbGciOiJFUzI1NiIs..."

user
object
required
authorizedOrganizations
object[]
required