인증 코드 교환 또는 갱신 토큰 교체

{
  "oneOf": [
    {
      "type": "object",
      "properties": {
        "client_id": {
          "type": "string",
          "minLength": 1,
          "maxLength": 2048,
          "pattern": "^[^\\u0000-\\u001F\\u007F]+$",
          "description": "The client_id returned by dynamic registration, or the exact public HTTPS URL of the client metadata document."
        },
        "resource": {
          "type": "string",
          "format": "uri",
          "description": "Required exact resource audience: use the resource value from this environment's protected-resource metadata. In production this is https://api.voicecheap.ai/mcp. A different origin, path, or trailing slash is rejected.",
          "examples": [
            "https://api.voicecheap.ai/mcp"
          ]
        },
        "grant_type": {
          "const": "authorization_code"
        },
        "code": {
          "type": "string",
          "minLength": 1,
          "maxLength": 256,
          "pattern": "^mcp_code_[A-Za-z0-9_-]{43}$",
          "description": "Single-use code returned to the exact registered callback."
        },
        "redirect_uri": {
          "type": "string",
          "minLength": 1,
          "maxLength": 2048,
          "pattern": "^[^\\u0000-\\u001F\\u007F]+$",
          "description": "Must exactly equal the callback bound to this code and registration."
        },
        "code_verifier": {
          "type": "string",
          "minLength": 43,
          "maxLength": 128,
          "pattern": "^[A-Za-z0-9._~-]{43,128}$",
          "description": "Original PKCE verifier used to calculate the authorization request's S256 code_challenge."
        }
      },
      "required": [
        "grant_type",
        "client_id",
        "resource",
        "code",
        "redirect_uri",
        "code_verifier"
      ],
      "not": {
        "anyOf": [
          {
            "required": [
              "client_secret"
            ]
          },
          {
            "required": [
              "client_assertion"
            ]
          }
        ]
      },
      "additionalProperties": true
    },
    {
      "type": "object",
      "properties": {
        "client_id": {
          "type": "string",
          "minLength": 1,
          "maxLength": 2048,
          "pattern": "^[^\\u0000-\\u001F\\u007F]+$",
          "description": "The client_id returned by dynamic registration, or the exact public HTTPS URL of the client metadata document."
        },
        "resource": {
          "type": "string",
          "format": "uri",
          "description": "Required exact resource audience: use the resource value from this environment's protected-resource metadata. In production this is https://api.voicecheap.ai/mcp. A different origin, path, or trailing slash is rejected.",
          "examples": [
            "https://api.voicecheap.ai/mcp"
          ]
        },
        "grant_type": {
          "const": "refresh_token"
        },
        "refresh_token": {
          "type": "string",
          "minLength": 1,
          "maxLength": 256,
          "pattern": "^mcp_refresh_[A-Za-z0-9_-]{43}$",
          "description": "The current unconsumed refresh token from a client registered for refresh_token."
        },
        "scope": {
          "type": "string",
          "minLength": 1,
          "maxLength": 2048,
          "pattern": "^ *(?:account:read|usage:read|settings:read|settings:write|team:read|team:write|projects:read|projects:write|projects:delete|translations:write|transcription:read|transcription:write|subtitles:read|subtitles:write|tts:read|tts:write|voices:read|voices:write|images:read|images:write|thumbnails:read|thumbnails:write|folders:read|folders:write|glossary:read|glossary:write|webhooks:read|webhooks:write|publishing:read|publishing:write|offline_access|openid|email)(?: +(?:account:read|usage:read|settings:read|settings:write|team:read|team:write|projects:read|projects:write|projects:delete|translations:write|transcription:read|transcription:write|subtitles:read|subtitles:write|tts:read|tts:write|voices:read|voices:write|images:read|images:write|thumbnails:read|thumbnails:write|folders:read|folders:write|glossary:read|glossary:write|webhooks:read|webhooks:write|publishing:read|publishing:write|offline_access|openid|email))* *$",
          "description": "Space-delimited subset of the original permissions, optionally including offline_access. Unsupported names, empty values, and added permissions are rejected; duplicates are removed. An explicit scope keeps only the listed product and identity permissions and may remove every product permission. Omit scope to retain the current grant, except identity permissions are dropped if OpenID Connect is unavailable.",
          "examples": [
            "account:read projects:read offline_access"
          ]
        }
      },
      "required": [
        "grant_type",
        "client_id",
        "resource",
        "refresh_token"
      ],
      "not": {
        "anyOf": [
          {
            "required": [
              "client_secret"
            ]
          },
          {
            "required": [
              "client_assertion"
            ]
          }
        ]
      },
      "additionalProperties": true
    }
  ]
}