Access Token Request

The client makes an access token request on behalf of the resource owner to Zoho Accounts via the user-agent (web browser):

URI Endpoint: https://accounts.zoho.com/oauth/v2/auth

HTTP Request Type: GET

Mandatory Parameters:

• client_id - Obtained from registering your client at the Zoho Accounts developer console.
• response_type -Value must be 'token'.
• redirect_uri - The URI endpoint that Zoho Accounts will redirect the web browser to with the access token after authorizing the client.
  Note: Make sure the authorized redirect URI is the same as the one provided while registering your client.
• scope - Sample scope - "AaaServer.profile.READ"

Access Token Response Parameters:

• access_token - A client-authorized key that lets the client access protected resources from Zoho. The client can make API requests using this access token for up to an hour after the creation of the token.
• expires_in - Time taken for an access token to expire, in seconds.
• location - Determines the user's domain location. Clients must make access token requests to that particular domain URI. Click here to get domain location and URI.

Get user information

Include "email" in your scope parameter in the access token request to get information about a user. The response for the request will have a parameter called id_token that will be in the header.payload.signature format. You need to decrypt the payload section of the parameter using the base 64 decryption algorithm to get information about the user.