{ "opencollection": "1.0.0", "info": { "name": "Box Authorize Authorization Oauth2 API", "version": "1.0" }, "items": [ { "info": { "name": "Oauth2", "type": "folder" }, "items": [ { "info": { "name": "Box Request access token", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/oauth2/token", "body": { "type": "form-urlencoded", "data": [] } }, "docs": "Request an Access Token using either a client-side obtained OAuth 2.0\nauthorization code or a server-side JWT assertion.\n\nAn Access Token is a string that enables Box to verify that a\nrequest belongs to an authorized session. In the normal order of\noperations you will begin by requesting authentication from the\n[authorize](#get-authorize) endpoint and Box will send you an\nauthorization code.\n\nYou will then send this code to this endpoint to exchange it for\nan Access Token. The returned Access To" }, { "info": { "name": "Box Refresh access token", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/oauth2/token#refresh", "body": { "type": "form-urlencoded", "data": [] } }, "docs": "Refresh an Access Token using its client ID, secret, and refresh token." }, { "info": { "name": "Box Revoke access token", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/oauth2/revoke", "body": { "type": "form-urlencoded", "data": [] } }, "docs": "Revoke an active Access Token, effectively logging a user out\nthat has been previously authenticated." } ] } ], "bundled": true }