Exchange Code for Tokens

curl https://app.agewallet.io/user/token \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d grant_type=authorization_code \
  -d code="$AUTH_CODE" \
  -d redirect_uri="https://yourapp.com/callback" \
  -d client_id="$AGEWALLET_CLIENT_ID" \
  -d client_secret="$AGEWALLET_CLIENT_SECRET" \
  -d code_verifier="$CODE_VERIFIER"

const response = await fetch('https://app.agewallet.io/user/token', {
  method: 'POST',
  headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
  body: new URLSearchParams({
    grant_type: 'authorization_code',
    code,
    redirect_uri: 'https://yourapp.com/callback',
    client_id: process.env.AGEWALLET_CLIENT_ID,
    client_secret: process.env.AGEWALLET_CLIENT_SECRET,
    code_verifier: req.session.agewalletVerifier
  })
});

if ( ! response.ok ) {
  const error = await response.json();
  throw new Error( `Token exchange failed: ${ error.error }` );
}

const tokens = await response.json();

$ch = curl_init( 'https://app.agewallet.io/user/token' );
curl_setopt_array( $ch, array(
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => http_build_query( array(
        'grant_type'    => 'authorization_code',
        'code'          => $code,
        'redirect_uri'  => 'https://yourapp.com/callback',
        'client_id'     => AGEWALLET_CLIENT_ID,
        'client_secret' => AGEWALLET_CLIENT_SECRET,
        'code_verifier' => $_SESSION['agewallet_verifier'],
    ) ),
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT        => 10,
) );
$body   = curl_exec( $ch );
$status = curl_getinfo( $ch, CURLINFO_HTTP_CODE );
curl_close( $ch );

if ( $status !== 200 ) {
    // Handle the failure; do not retry with the same code.
}
$tokens = json_decode( $body, true );

import requests

response = requests.post(
    "https://app.agewallet.io/user/token",
    data={
        "grant_type": "authorization_code",
        "code": code,
        "redirect_uri": "https://yourapp.com/callback",
        "client_id": AGEWALLET_CLIENT_ID,
        "client_secret": AGEWALLET_CLIENT_SECRET,
        "code_verifier": session["agewallet_verifier"],
    },
    timeout=10,
)
response.raise_for_status()

tokens = response.json()

{
  "access_token": "eyJ0eXAiOiJKV1Qi...[truncated]",
  "id_token": "eyJ0eXAiOiJKV1Qi...[truncated]",
  "token_type": "Bearer",
  "expires_in": 900
}