{
  "title": "TokenAuthnCodeRequest",
  "type": "object",
  "properties": {
    "client_id": {
      "title": "Client Id",
      "minLength": 1,
      "maxLength": 2083,
      "format": "uri",
      "type": "string"
    },
    "client_assertion": {
      "title": "Client Assertion",
      "pattern": "^[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+",
      "type": "string"
    },
    "client_assertion_type": {
      "title": "Client Assertion Type",
      "enum": [
        "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
      ],
      "type": "string"
    },
    "code": {
      "title": "Code",
      "type": "string"
    },
    "code_verifier": {
      "title": "Code Verifier",
      "type": "string"
    },
    "grant_type": {
      "title": "Grant Type",
      "enum": [
        "authorization_code"
      ],
      "type": "string"
    }
  },
  "required": [
    "client_id",
    "client_assertion",
    "client_assertion_type",
    "code",
    "code_verifier",
    "grant_type"
  ]
}

{
  "title": "TokenResponse",
  "type": "object",
  "properties": {
    "access_token": {
      "title": "Access Token",
      "pattern": "^[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+",
      "type": "string"
    },
    "token_type": {
      "title": "Token Type",
      "enum": [
        "Bearer"
      ],
      "type": "string"
    },
    "expires_in": {
      "title": "Expires In",
      "type": "integer"
    },
    "id_token": {
      "title": "Id Token",
      "pattern": "^[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+",
      "type": "string"
    }
  },
  "required": [
    "access_token",
    "token_type",
    "expires_in",
    "id_token"
  ]
}

{
  "title": "TokenRefreshRequest",
  "type": "object",
  "properties": {
    "client_id": {
      "title": "Client Id",
      "minLength": 1,
      "maxLength": 2083,
      "format": "uri",
      "type": "string"
    },
    "client_assertion": {
      "title": "Client Assertion",
      "pattern": "^[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+",
      "type": "string"
    },
    "client_assertion_type": {
      "title": "Client Assertion Type",
      "enum": [
        "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
      ],
      "type": "string"
    },
    "grant_type": {
      "title": "Grant Type",
      "enum": [
        "refresh_token"
      ],
      "type": "string"
    },
    "refresh_token": {
      "title": "Refresh Token",
      "type": "string"
    }
  },
  "required": [
    "client_id",
    "client_assertion",
    "client_assertion_type",
    "grant_type",
    "refresh_token"
  ]
}

{
  "title": "TokenRefreshResponse",
  "type": "object",
  "properties": {
    "access_token": {
      "title": "Access Token",
      "pattern": "^[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+",
      "type": "string"
    },
    "token_type": {
      "title": "Token Type",
      "enum": [
        "Bearer"
      ],
      "type": "string"
    },
    "expires_in": {
      "title": "Expires In",
      "type": "integer"
    },
    "id_token": {
      "title": "Id Token",
      "pattern": "^[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+",
      "type": "string"
    },
    "refresh_token": {
      "title": "Refresh Token",
      "pattern": "^[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+\\.[a-zA-Z\\_\\-0-9]+",
      "type": "string"
    }
  },
  "required": [
    "access_token",
    "token_type",
    "expires_in",
    "id_token",
    "refresh_token"
  ]
}

{
  "title": "TokenErrorResponse",
  "type": "object",
  "properties": {
    "error": {
      "title": "Error",
      "enum": [
        "invalid_request",
        "unauthorized_client"
      ],
      "type": "string"
    },
    "error_description": {
      "title": "Error Description",
      "type": "string"
    }
  },
  "required": [
    "error",
    "error_description"
  ]
}