pub.oauth:getToken

grant_type	String Specifies the type of grant flow required by the client. Specify one of the following: authorization_code for authorization code grant flows client_credentials for client credentials grant flows. password for resource owner password credentials grant flows. refresh_token for refresh token grant flows.
code	String. Optional. The OAuth authorization code received from the authorization server. You must specify code when grant_type is authorization_code. The service ignores the code value for all other grant types.
client_id	String. Optional. The client identifier generated by the authorization server when the client application is registered. The client_id is used to authenticate the client to the authorization server. Public clients must provide a value for client_id when grant_type is authorization_code or password. Confidential clients do not need to provide a value for this parameter because they are required to use HTTP authentication to identify themselves. The service ignores the client_id value if the grant_type is client_credentials.
redirect_uri	String. Optional. The URI the authorization server used to redirect the client when the client request for authorization is approved. redirect_uri is required when grant_type is authorization_code and the call to pub.oauth:authorize that initiated the authorization code grant included a redirect_uri value. The redirect_uri supplied for pub.oauth:getToken must exactly match the redirect_uri value supplied to the call to pub.oauth:authorize. If a redirect_uri value was not supplied to pub.oauth:authorize, then no redirect_uri value may be passed to the pub.oauth:getToken service. Doing so will result in an HTTP 400 status code being returned. The service ignores redirect_uri for all other grant types.
refresh_token	String. Optional. Refresh token issued to the client by the authentication server.
scope	String. Optional. Specify the name of one or more scopes required by the client. Use a space to separate multiple scopes. The scope variable is used when grant_type is refresh_token, password, or client_credentials. The service ignores the scope value when grant_type is authorization_code. When using the pub.oauth:getToken service with the refresh_token grant type, the value for scope must match or be a subset of the value you provided for the pub.oauth:authorize and pub.oauth:getAccessToken services. That is, the scope of the refresh token can be smaller than the original request. It cannot contain any scopes that were not approved by the resource owner.
username	String. Optional. The user name of the resource owner. A username is required when the grant_type is password. The service ignores username for all other grant types.
password	String. Optional. The password of the resource owner. A username is required when the grant_type is password. The service ignores password for all other grant types.
code_verifier	String Optional. The code_verifier generated by the client application. The code_verifier input parameter is required for public clients when a code_challenge has been sent to the authorization endpoint and the grant_type is authorization_code. Integration Server applies the code_challenge_method provided in pub.oauth:authorize to transform the supplied code_verifier value. If the transformed value matches the code_challenge sent to the authorization endpoint, the token endpoint returns an access token.

The tokens, authorization codes, and client information are stored in the authorization server's caches. By default, these caches maintain up to 1000 elements in memory and 20000 elements on disk. If the cache size is exceeded, OAuth performance can be affected on Integration Server and can lead to errors if the disk runs out of space. If you anticipate that your authorization server's cache will exceed the default size, you should increase the Maximum Elements In Memory, Maximum Elements On Disk, or Maximum Off-Heap settings for Integration Server. For information about changing these settings, see the section Working with Caches in the webMethods Integration Server Administrator’s Guide. Working with Caches. If the cache is distributed, see the BigMemory Max product documentation for 4.1 at www.terracotta.org/documentation for additional considerations when sizing distributed caches.

access_token	String The access token issued by the authorization server.
token_type	String The type of access token issued by the authorization server. The value is Bearer.
expires_in	String The number of seconds for which the access token is valid.
refresh_token	String. Conditional. The refresh token issued by the authorization server. You can use this token to obtain new access tokens using the same authorization grant. If the client is registered with a refresh limit of 0, no refresh token is issued.
scope	String. Conditional. Set of scopes requested by the client.