OAuth 2.0 token exchange
POST/v1/api/oauth2/jwtexchange
OAuth 2.0 authorization-code (and refresh_token) exchange for registered TradeZero partner integrations. Returns a Bearer JWT access token and refresh token. This is not RFC 7523 JWT assertion - it is the token endpoint for the partner authorization code flow described at https://developer.tradezero.com/docs/documentation/oauth-partner-guide. Accepts application/x-www-form-urlencoded or multipart/form-data. Personal or direct programmatic access uses API key headers (TZ-API-KEY-ID and TZ-API-SECRET-KEY) from the TradeZero Portal at https://portal.tradezero.com - see https://developer.tradezero.com/docs/documentation/api-keys.
Request
Responses
- 200
- 400
- 403
- 404
- 500
Token pair issued
Rejected exchange - non-RFC-6749 JSON body (see partner guide Error responses)
Edge or access denial (often HTML) - see partner guide Error responses
Non-JSON not-found or edge response - confirm issued token URL and egress registration; on refresh see partner guide Step 7
Internal Server Error