The grant type used for authentication

Authorization code received from the "/oauth/authorize" request in the redirect URI. Required only when using "authorization_code" grant type

Redirect URI included in the "/oauth/authorize" request. Optional, used when grant type is "authorization_code"

Refresh token previously issued in the authorization code flow. Required only when using "refresh_token" grant type

Defaults to jwt. Required only for Service Tokens emission.

A space-separated list of scopes (URL encoded) the client is requesting access to. Optional, used only when requesting with "client_credentials" and "refresh_token" grant types. Whenever a new access token is being issued using "refresh_token" grant type, the requested scope must not include additional scopes that were not issued in the original access token and, if omitted, the new access token will be issued with the same scope as was previously issued

The type of signed JWT assertion (it must be "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"). Required if not using HTTP Basic Auth in the Authorization header

Signed JWT assertion (as per the "private_key_jwt" mechanism of OpenID Connect). Required if not using HTTP Basic Auth in the Authorization header

Authorization header containing the client authentication, supported via HTTP Basic Auth with the client’s client_id and client_secret. Required if not using a signed JWT assertion (as per the "private_key_jwt" mechanism of OpenID Connect)