Skip to main content
POST
Poll for the result of a client grant

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

Request body for POST /auth/grant/token.

grant_code
string
required

Response

Current grant state. See status for details.

Response from POST /auth/grant/token. The status field follows RFC 8628's "error-via-200" convention so the client can branch its polling loop on status without interpreting HTTP error codes.

status
enum<string>
required

Current state of the grant.

Available options:
authorization_pending,
approved,
access_denied,
expired_token,
slow_down
jwt
string

The minted client JWT. Present only when status === "approved".

token_type
string

Always bearer when a token is returned.

Last modified on July 20, 2026