grant type

• Enable Client Credentials
• Enable Authorization Code

curl -s -X POST https://<OKTA_DOMAIN>/oauth2/v1/token \
       -d "grant_type=authorization_code" \
       -d "code=MY_INVALID_TEST" \
       -d "client_id=<CLIENT_ID>" \
       -d "client_secret=<CLIENT_SECRET>" \
       -d "redirect_uri=https://placeholder/callback" | jq

invalid_grant is a valid response

See also

• IdP <-> RP, client_id, client_secret, Issuer URL, QUARKUS_OIDC_CLIENT_ID, .well-known/openid-configuration, grant_type
• redirect_uri, Keycloak OIDC
• OpenID Connect (OIDC), kubectl oidc-login, AWS IAM OIDC, EKS OIDC, EKS module, aws iam list-open-id-connect-providers | aws iam create-open-id-connect-provider | aws iam get-open-id-connect-provider, OIDC tokens, aws_lb_listener_rule, Google Cloud Identity, Claims, keycloak_oidc_identity_provider, settings, OIDC client, client_id, client_secret, Authorization Code Flow, OIDC Web App, Back-Channel

Okta app, Okta create app integration, okta_app_oauth, Grant type