Issue an OAuth access token

Exchange OAuth client credentials for a short-lived bearer token.

RFC 6749 defines the token request body as application/x-www-form-urlencoded. This endpoint also accepts application/json as an Auth0-compatible extension. Client credentials may be supplied using HTTP Basic authentication or in the request body.

This endpoint implements the OAuth 2.0 client credentials grant for the public API.