Resource Owner Token Response

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/usps/json-schema/usps-resource-owner-token-response-schema.json",
  "title": "Resource Owner Token Response",
  "description": "The OAuth token response for third-party client applications to use to access USPS APIs on behalf of USPS customers.\nBoth access and refresh tokens are returned in the response. You may use [The Unix Epoch Time Converter](https://www.epochconverter.com/) to convert access token issued at values to human readable formats.\nUse the public key provided in the response to verify the access token signature.\n",
  "x-generated": "2026-11-11",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/usps-oauth-openapi.yml#/components/schemas/ResourceOwnerTokenResponse",
  "readOnly": true,
  "required": [
    "access_token",
    "expires_in",
    "token_type",
    "refresh_token",
    "refresh_token_expires_in"
  ],
  "properties": {
    "access_token": {
      "description": "The access token issued to use to acess protected resources.",
      "type": "string"
    },
    "issued_at": {
      "description": "The date and time the access token was issued, expressed in Unix epoch time in milliseconds.\nYou may use [The Unix Epoch Time Converter](https://www.epochconverter.com/) to convert access token issued at values to human readable formats.\n",
      "type": "integer",
      "format": "int64"
    },
    "expires_in": {
      "description": "The expiration time of the issued access token, in seconds.",
      "type": "integer"
    },
    "token_type": {
      "description": "The access token type provides the client with the information required to successfully utilize the access token to make a protected resource request (along with type-specific attributes).  The client MUST NOT use an access token if it does not understand the token type.",
      "type": "string",
      "enum": [
        "Bearer"
      ],
      "default": "Bearer"
    },
    "status": {
      "description": "The status of the access token.",
      "type": "string",
      "enum": [
        "approved",
        "revoked"
      ]
    },
    "issuer": {
      "description": "The authority that issued the token(s).",
      "type": "string"
    },
    "scope": {
      "description": "The OAuth scope being requested by the client application, specified as a list of space-delimited, case-sensitive strings.  If ommitted from the token request then the default scope configured for the client application is used.",
      "type": "string"
    },
    "refresh_token": {
      "description": "The refresh token.",
      "type": "string"
    },
    "refresh_token_issued_at": {
      "description": "The date and time the refresh token was issued expressed in Unix epoch time in milliseconds.\nYou may use [The Unix Epoch Time Converter](https://www.epochconverter.com/) to convert refresh token issued at values to human readable formats.\n",
      "type": "integer",
      "format": "int64"
    },
    "refresh_token_expires_in": {
      "description": "The refresh token expiration, in seconds.",
      "type": "integer"
    },
    "refresh_count": {
      "description": "The number of times the refresh token operation has been used.",
      "type": "integer"
    },
    "refresh_token_status": {
      "description": "The current state of the refresh token.",
      "type": "string",
      "enum": [
        "approved",
        "revoked"
      ]
    },
    "client_id": {
      "description": "The unique identifier for the client application.",
      "type": "string"
    },
    "application_name": {
      "description": "The name of the client application.",
      "type": "string"
    },
    "api_products": {
      "description": "The list of API products approved for use by the client application.",
      "type": "string"
    },
    "public_key": {
      "description": "The base64-encoded public cryptographic key used to validate the signature of the access token.  Validation ensures that the access token has not been tampered with and it originated from a known, trusted source.",
      "type": "string",
      "format": "byte"
    }
  },
  "additionalProperties": false
}