Vendor-specific or extension fields returned by the authorization server.
Optionalaccess_The exchanged access token.
Optionalexpires_Absolute UNIX timestamp (seconds) at which the access token expires.
Use this instead of expires_in when persisting or forwarding expiry.
Optionalid_ID token, if the AS returned one (uncommon for token exchange).
Optionalissued_RFC 8693 — the type of token that was issued.
Typically "urn:ietf:params:oauth:token-type:access_token".
Optionalrefresh_Refresh token, if the AS returned one.
OptionalscopeSpace-separated scopes granted by the AS.
Optionaltoken_Usually "Bearer".
Represents the response from a token exchange request (RFC 8693).