Token exchange - Freedom Pay

After the user returns to the redirect_uri page, the code received in the request must be exchanged for an access_token. BasicAuth should be used as authentication data.

The received VVT will contain information of the following type:

{
  "iss": "https://passport.freedompay.kz",
  "sub": "41790bb3-62ba-461f-9bed-e232e30ad377",
  "aud": "b4b93cc5-3ca5-4ca1-aaaf-5aab2aac7584",
  "exp": 1741077405,
  "iat": 1740472605,
  "nonce": "opQnEJ5fvOt5JLbl8IBAcS82Yy6QXFFm"
}

Sub - user freedom_id, Aud - your client id.

Request

Authorization

Send your HTTP requests with an

Authorization

header that contains the word Basic followed by a space and a base64-encoded string username:password

Example:

Authorization: Basic *****************

Body Params application/json

Example

{
    "code": "string",
    "redirect_uri": "string",
    "grant_type": "string"
}

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

Responses

🟢200Success

application/json

Body

Example

{
    "access_token": "DZN0MZP726480hFLHBEmMqe2iLNIjt07OrUcsm5m1BimTiuiF9yUJ3EQmkGwKNC2LmrmU4C4yWF5V3iwSN4ngi1Q5CRkOBixjdma0mWxsGhC7RZldkwhxmpow1UtyQ6O",
    "expires_in": 604799,
    "refresh_token": "a16UDg4GEmLHZu85WPQzM6diJtrzRz1q2iomXZzZVkPqFbmVihz03mqwbJQcPVn2boISi7qbleq1VWNinMTFUbAnyc3XgbcOQ1DbZ5dkOPTWiMjiNky81bJNjKPmUY9d",
    "token_type": "Bearer",
    "id_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwczovL3Bhc3Nwb3J0LmZyZWVkb21wYXkua3oiLCJzdWIiOiI0MTc5MGJiMy02MmJhLTQ2MWYtOWJlZC1lMjMyZTMwYWQzNzciLCJhdWQiOiJiNGI5M2NjNS0zY2E1LTRjYTEtYWFhZi01YWFiMmFhYzc1ODQiLCJleHAiOjE3NDEwNzc0MDUsImlhdCI6MTc0MDQ3MjYwNSwibm9uY2UiOiJvcFFuRUo1ZnZPdDVKTGJsOElCQWNTODJZeTZRWEZGbSJ9._7InjwY3Jh-9ZfKwtZpLR-AuXfgshSmIyHw-YL4Us7Q"
}