EggyByte Server
  1. AuthService
EggyByte Server
  • Default module
    • 项目介绍
    • 用户协议
    • 隐私政策
    • SuperDungeon
      • 超能魔盗团 隐私政策
      • User
        • Get User Data
        • Free Lottery
        • Paid Lottery
        • Sell Artwork
        • Find Top Users
        • Get Initial Data
        • Get Access
        • Change Name
      • Rank
        • Update
        • Find Top Users
      • Local
      • Remote
    • EggyByte
      • Account
        • Login
        • Register
        • Login Or Register
        • Access
        • Buy
        • Get Public Access
        • Formal Register
      • Game
        • Save Data
        • Load Data
      • Test
        • Random String
        • Get Map Json
      • Crypto
        • Compute Hash
        • Encrypt
        • Encrypt Map
        • Decrypt
      • Ad
        • Show
        • Debug
        • Impression Callback
      • User
        • Lock Test
        • Get User Data
        • Open Chest
      • Admin
        • Create Api Roles Copy
        • Create Api Roles Copy Copy
        • Delete Api Roles
        • Create Api Roles
      • Database
        • Update Mongo Users
        • List Databases
        • List Collections
        • List Mongo Users
        • Get Collection Stats
        • Get Collection Info
        • Get Paginated Documents
        • Create Mongo Users
        • Create Mongo Databases
      • Mailing
        • Send Mail
        • Send Captcha
        • Check Captcha
      • ThirdParty
        • Connect Url
        • Callback
        • Payment Link
    • 1
    • Untitled Endpoint
      GET
    • Untitled Endpoint
      POST
    • Setup
      POST
    • Create Database
      POST
    • Get Card
      GET
    • Create Question
      POST
    • Create Collection
      POST
    • Get Dashboards
      GET
    • Get Dashboard
      GET
    • Get Dashboard Copy
      POST
    • Untitled Endpoint
      GET
    • Untitled Endpoint
      GET
  • auth/v1/auth.proto
    • AuthService
      • GetJWKS returns the JSON Web Key Set for token validation
        GET
      • GetOIDCDiscovery returns the OIDC discovery document
        GET
      • Authorize initiates the OAuth/OIDC authorization flow
        GET
      • Authorize initiates the OAuth/OIDC authorization flow
        POST
      • IntrospectToken validates and returns information about a token (RFC 7662)
        POST
      • RevokeToken revokes an access or refresh token (RFC 7009)
        POST
      • Token exchanges authorization code or refresh token for access tokens
        POST
      • GetUserInfo returns user information from a valid access token
        GET
      • GetUserInfo returns user information from a valid access token
        POST
      • ListClients lists all OIDC clients
        GET
      • RegisterClient registers a new OIDC client
        POST
      • DeleteClient deletes an OIDC client
        DELETE
      • UpdateClient updates an existing OIDC client
        PUT
      • Authenticate user credentials and return tokens (for password grant)
        POST
      • Logout invalidates user tokens and sessions
        POST
      • RefreshToken refreshes an access token using a refresh token
        POST
      • ListRoles lists all roles
        GET
      • CreateRole creates a new role
        POST
      • DeleteRole deletes a role
        DELETE
      • UpdateRole updates an existing role
        PUT
      • AssignUserRole assigns a role to a user
        POST
      • RevokeUserRole revokes a role from a user
        DELETE
  • user/v1/user.proto
    • UserService
      • ListUsers retrieves a paginated list of users (admin only)
      • CreateUser creates a new user account (called by Auth service after successful registration)
      • SearchUsers searches users by criteria
      • GetUserStats retrieves user statistics
      • SendVerificationEmail sends a verification code to user's email
      • VerifyEmail verifies user's email with verification code
      • GetUser retrieves a user's profile
      • UpdateUser updates basic user information
      • ActivateUser activates a user account
      • ListUserAddresses lists all user addresses
      • AddUserAddress adds a new address for the user
      • DeleteUserAddress deletes a user address
      • UpdateUserAddress updates an existing user address
      • BanUser bans a user account permanently
      • DeactivateUser deactivates a user account (soft delete)
      • UpdateUserPreferences updates user's preferences
      • GetUserProfile retrieves a user's complete profile (including extended info)
      • UpdateUserProfile updates user's extended profile
      • SuspendUser suspends a user account temporarily
  1. AuthService

Token exchanges authorization code or refresh token for access tokens

POST
/oauth/token

Request

Body Params application/json

Example
{
    "grantType": "string",
    "code": "string",
    "redirectUri": "string",
    "clientId": "string",
    "clientSecret": "string",
    "refreshToken": "string",
    "username": "string",
    "password": "string",
    "scope": "string",
    "codeVerifier": "string"
}

Request Code Samples

Shell
JavaScript
Java
Swift
Go
PHP
Python
HTTP
C
C#
Objective-C
Ruby
OCaml
Dart
R
Request Request Example
Shell
JavaScript
Java
Swift
curl --location --request POST '/oauth/token' \
--header 'Content-Type: application/json' \
--data-raw '{
    "grantType": "string",
    "code": "string",
    "redirectUri": "string",
    "clientId": "string",
    "clientSecret": "string",
    "refreshToken": "string",
    "username": "string",
    "password": "string",
    "scope": "string",
    "codeVerifier": "string"
}'

Responses

🟢200OK
application/json
A successful response.
Body

Example
{
    "accessToken": "string",
    "tokenType": "string",
    "expiresIn": 0,
    "refreshToken": "string",
    "scope": "string",
    "idToken": "string"
}
🟢200Success
Modified at 2025-09-16 19:37:45
Previous
RevokeToken revokes an access or refresh token (RFC 7009)
Next
GetUserInfo returns user information from a valid access token
Built with