Exchange an access token for a scoped v2 session

post

https://your-protect-instance.example.com/api/rest/v2/authentication/oidc/exchange

Non-interactive, server-to-server: verifies an access token issued by this deployment's OAuth authorization server (typ at+jwt, issuer, and an audience among the caller's resources) and issues a v2 session confined to its scope, with no refresh token. The caller authenticates with a client assertion bound to that token.

Responses

200A successful response.

400Bad Request: indicates that the server cannot or will not process the request due to something that is perceived to be a client error (for example, malformed request syntax, invalid request message framing, or deceptive request routing)

401Unauthorized: indicates that the client request has not been completed because it lacks valid authentication credentials for the requested resource

403Forbidden: indicates that the server understands the request but refuses to authorize it

404Not Found: indicates that the server cannot find the requested resource

500Internal Server Error: indicates that the server encountered an unexpected condition that prevented it from fulfilling the request

503Service Unavailable: indicates that the server is not ready to handle the request.

defaultAn unexpected error response.