TokenResponse

  • accessToken
    Type: string
    required

    Short-lived JWT — include as Authorization: Bearer <token>

  • expiresIn
    Type: integer
    required

    Access token lifetime in seconds

  • refreshToken
    Type: string
    required

    Long-lived token — exchange via /auth/refresh for a new access token

  • tokenType
    Type: string
    required