Exchange OAuth token

Exchanges an authorization code with PKCE or rotates a refresh token; access tokens last 15 minutes and refresh tokens 30 days.

Pinhere APIs for projects, origins, issues, private screenshots, webhooks, PATs, and Chrome-extension OAuth. The fixed PontxSpec covers all 34 Endpoints. Hub provides documentation and a local SDK/CLI only; it proxies no request.

Request

operationId: exchangeOAuthToken
Server: https://pinhere-jasonhzqs-projects.vercel.app/api/v1
Authentication: pinherePat, websiteSession, extensionOAuth

Request parameters

No URL, query, or header parameters.

Request body

OAuthTokenInputrequired

Content-Type: application/json

Responses

`200`

objectapplication/json

Access and refresh tokens.

Properties: data

`401`

ErrorResponseapplication/json

Authorization code, verifier, or refresh token is invalid.

Properties: error

`default`

ErrorResponseapplication/json

Standard error response.

Properties: error

{
  "data": {
    "accessToken": "redacted-access-token",
    "refreshToken": "redacted-refresh-token",
    "expiresIn": 900,
    "tokenType": "Bearer",
    "scopes": [
      "issues:create"
    ]
  }
}