Exchange Code for Tokens

curl https://app.agewallet.io/user/token \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d grant_type=authorization_code \
  -d code="$AUTH_CODE" \
  -d redirect_uri="https://yourapp.com/callback" \
  -d client_id="$AGEWALLET_CLIENT_ID" \
  -d client_secret="$AGEWALLET_CLIENT_SECRET" \
  -d code_verifier="$CODE_VERIFIER"

const response = await fetch('https://app.agewallet.io/user/token', {
  method: 'POST',
  headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
  body: new URLSearchParams({
    grant_type: 'authorization_code',
    code,
    redirect_uri: 'https://yourapp.com/callback',
    client_id: process.env.AGEWALLET_CLIENT_ID,
    client_secret: process.env.AGEWALLET_CLIENT_SECRET,
    code_verifier: req.session.agewalletVerifier
  })
});

if ( ! response.ok ) {
  const error = await response.json();
  throw new Error( `Token exchange failed: ${ error.error }` );
}

const tokens = await response.json();

$response = wp_remote_post( 'https://app.agewallet.io/user/token', array(
    'headers' => array( 'Content-Type' => 'application/x-www-form-urlencoded' ),
    'body'    => array(
        'grant_type'    => 'authorization_code',
        'code'          => $code,
        'redirect_uri'  => 'https://yourapp.com/callback',
        'client_id'     => AGEWALLET_CLIENT_ID,
        'client_secret' => AGEWALLET_CLIENT_SECRET,
        'code_verifier' => $_SESSION['agewallet_verifier'],
    ),
) );

if ( is_wp_error( $response ) || 200 !== wp_remote_retrieve_response_code( $response ) ) {
    // Handle the failure; do not retry with the same code.
}

$tokens = json_decode( wp_remote_retrieve_body( $response ), true );

import requests

response = requests.post(
    "https://app.agewallet.io/user/token",
    data={
        "grant_type": "authorization_code",
        "code": code,
        "redirect_uri": "https://yourapp.com/callback",
        "client_id": AGEWALLET_CLIENT_ID,
        "client_secret": AGEWALLET_CLIENT_SECRET,
        "code_verifier": session["agewallet_verifier"],
    },
    timeout=10,
)
response.raise_for_status()

tokens = response.json()

{
  "access_token": "eyJ0eXAiOiJKV1Qi...[truncated]",
  "id_token": "eyJ0eXAiOiJKV1Qi...[truncated]",
  "token_type": "Bearer",
  "expires_in": 900
}