Skip to content

/AWS1/CL_SISCREO2TOKENREQBODY

Request body payload for CreateOAuth2Token operation

The operation type is determined by the grant_type parameter: - grant_type=authorization_code: Requires code, redirect_uri, code_verifier - grant_type=refresh_token: Requires refresh_token

CONSTRUCTOR

IMPORTING

Required arguments:

iv_clientid TYPE /AWS1/SISCLIENTID /AWS1/SISCLIENTID

The client identifier (ARN) used during Sign-In onboarding Required for both authorization code and refresh token flows

iv_granttype TYPE /AWS1/SISGRANTTYPE /AWS1/SISGRANTTYPE

OAuth 2.0 grant type - determines which flow is used Must be "authorization_code" or "refresh_token"

Optional arguments:

iv_code TYPE /AWS1/SISAUTHORIZATIONCODE /AWS1/SISAUTHORIZATIONCODE

The authorization code received from /v1/authorize Required only when grant_type=authorization_code

iv_redirecturi TYPE /AWS1/SISREDIRECTURI /AWS1/SISREDIRECTURI

The redirect URI that must match the original authorization request Required only when grant_type=authorization_code

iv_codeverifier TYPE /AWS1/SISCODEVERIFIER /AWS1/SISCODEVERIFIER

PKCE code verifier to prove possession of the original code challenge Required only when grant_type=authorization_code

iv_refreshtoken TYPE /AWS1/SISREFRESHTOKEN /AWS1/SISREFRESHTOKEN

The refresh token returned from auth_code redemption Required only when grant_type=refresh_token


Queryable Attributes

clientId

The client identifier (ARN) used during Sign-In onboarding Required for both authorization code and refresh token flows

Accessible with the following methods

Method Description
GET_CLIENTID() Getter for CLIENTID, with configurable default
ASK_CLIENTID() Getter for CLIENTID w/ exceptions if field has no value
HAS_CLIENTID() Determine if CLIENTID has a value

grantType

OAuth 2.0 grant type - determines which flow is used Must be "authorization_code" or "refresh_token"

Accessible with the following methods

Method Description
GET_GRANTTYPE() Getter for GRANTTYPE, with configurable default
ASK_GRANTTYPE() Getter for GRANTTYPE w/ exceptions if field has no value
HAS_GRANTTYPE() Determine if GRANTTYPE has a value

code

The authorization code received from /v1/authorize Required only when grant_type=authorization_code

Accessible with the following methods

Method Description
GET_CODE() Getter for CODE, with configurable default
ASK_CODE() Getter for CODE w/ exceptions if field has no value
HAS_CODE() Determine if CODE has a value

redirectUri

The redirect URI that must match the original authorization request Required only when grant_type=authorization_code

Accessible with the following methods

Method Description
GET_REDIRECTURI() Getter for REDIRECTURI, with configurable default
ASK_REDIRECTURI() Getter for REDIRECTURI w/ exceptions if field has no value
HAS_REDIRECTURI() Determine if REDIRECTURI has a value

codeVerifier

PKCE code verifier to prove possession of the original code challenge Required only when grant_type=authorization_code

Accessible with the following methods

Method Description
GET_CODEVERIFIER() Getter for CODEVERIFIER, with configurable default
ASK_CODEVERIFIER() Getter for CODEVERIFIER w/ exceptions if field has no value
HAS_CODEVERIFIER() Determine if CODEVERIFIER has a value

refreshToken

The refresh token returned from auth_code redemption Required only when grant_type=refresh_token

Accessible with the following methods

Method Description
GET_REFRESHTOKEN() Getter for REFRESHTOKEN, with configurable default
ASK_REFRESHTOKEN() Getter for REFRESHTOKEN w/ exceptions if field has no value
HAS_REFRESHTOKEN() Determine if REFRESHTOKEN has a value