Exchange an OAuth authorization code or refresh token for an access token.

Refreshing Tokens

Refresh tokens are single-use. Each successful refresh returns a new refresh_token and invalidates the previous one. Store the new access_token and refresh_token from the response before the next refresh.

If the exchange cannot be completed, this endpoint returns a 400 response with an OAuth error and description.