Vendor-specific or extension fields returned by the authorization server.
Optionalaccess_The exchanged access token.
OptionalactActor claim from an RFC 8693 delegation exchange.
Populated when actor_token was provided and the AS included the claim
in the returned id_token or JWT access_token.
Optionalexpires_Absolute UNIX timestamp (seconds) at which the access token expires.
Use this instead of expires_in when persisting or forwarding expiry.
Optionalid_ID token, if the AS returned one (uncommon for token exchange).
Optionalissued_RFC 8693 — the type of token that was issued.
Typically "urn:ietf:params:oauth:token-type:access_token".
Optionalrefresh_Refresh token, if the AS returned one.
OptionalscopeSpace-separated scopes granted by the AS.
Optionaltoken_Usually "Bearer".
Represents the response from a token exchange request (RFC 8693).