# Token endpoint

Documentation owner: product `access`; documentation version: `3.9.1`.
Source: `content/products/access/3.9.1/key-components/modules/oidc/token-endpoint/README.md` at commit `eaf7a020437971baeee95e87eaf963636040ac71`.

```
Example: http://127.0.0.1:8080/oidc/tenant1/token-endpoint
```

#### Token endpoint errors

| Error id          | Description                                                                                               |
| ----------------- | --------------------------------------------------------------------------------------------------------- |
| `invalid_request` | The request is NOT valid. This is usually due to missing mandatory parameters or wrong parameter values.  |
| `invalid_client`  | Provided client information does not match the configured client information. (clientid & client\_secret) |
| `invalid_grant`   | The provided 'code' is NOT valid. Either it has timed out or has already been used.                       |

## Explore this section

| Column 1 | Column 2 |
| --- | --- |
| **Authorization code** / Configuration and usage guidance for Authorization code in Fortified ID Access. | [authorization-code](/products/access/key-components/modules/oidc/token-endpoint/authorization-code/) |
| **Refresh token** / Configuration and usage guidance for Refresh token in Fortified ID Access. | [refresh-token](/products/access/key-components/modules/oidc/token-endpoint/refresh-token/) |
| **Client credentials** / Used for machine-2-machine. | [client-credentials](/products/access/key-components/modules/oidc/token-endpoint/client-credentials/) |