OAuth2 client identifier.
OAuth2 client secret.
OptionalExtraExtra application/x-www-form-urlencoded parameters appended to the grant body for vendors
whose token endpoint requires non-standard inputs — e.g. Auth0's audience on a
client_credentials grant, or a vendor-specific resource/tenant param. Applies to every
grant type; standard params (grant_type, client_id/secret, scope, refresh_token, username,
password) take precedence and are never overwritten by this map.
OptionalPasswordPassword — required for the password grant.
OptionalRefreshRefresh token — required for the refresh_token grant.
OptionalScopeParameter name carrying the scopes. Defaults to scope.
OptionalScopesSpace- or comma-delimited scopes (sent as the scopes/scope param).
OptionalTimeoutRequest timeout in ms. Default 30000.
Absolute token endpoint URL (e.g. https://tenant.example.com/oauth/token).
OptionalUseSend client_id/secret as HTTP Basic instead of in the form body. Default false.
OptionalUsernameUsername — required for the password grant.
OptionalUsernameParameter name carrying the username in a password grant. Defaults to username
(RFC 6749 §4.3). Some Doorkeeper/WineBouncer deployments (e.g. Hivebrite) name it
admin_email; set this to that key when the vendor diverges from the spec name.
Inputs needed to mint/refresh an OAuth2 access token.