> ## Documentation Index > Fetch the complete documentation index at: https://ai.easyaf.dev/llms.txt > Use this file to discover all available pages before exploring further. # TokenEndpointClient > Posts an RFC 6749 token request on the handler-free `'OAuth'` named [HttpClient](https://learn.microsoft.com/dotnet/api/system.net.http.httpclient) and turns... ## Definition **Assembly:** Microsoft.OData.Mcp.Authentication.dll **Namespace:** Microsoft.OData.Mcp.Authentication.Outbound **Inheritance:** System.Object ## Syntax ```csharp theme={null} Microsoft.OData.Mcp.Authentication.Outbound.TokenEndpointClient ``` ## Summary Posts an RFC 6749 token request on the handler-free `"OAuth"` named [HttpClient](https://learn.microsoft.com/dotnet/api/system.net.http.httpclient) and turns the answer into either a [TokenEndpointResponse](https://ai.easyaf.dev/odata-mcp/api-reference/Microsoft/OData/Mcp/Authentication/Outbound/TokenEndpointResponse.md) or an [OAuthTokenException](https://ai.easyaf.dev/odata-mcp/api-reference/Microsoft/OData/Mcp/Authentication/Outbound/OAuthTokenException.md). Every grant in this package — device code, refresh, authorization code, client credentials — sends its token request through this one class. ## Remarks A new `"OAuth"` client is requested from [IHttpClientFactory](https://learn.microsoft.com/dotnet/api/system.net.http.ihttpclientfactory) on every call rather than cached, matching the "Two named HttpClients" table in `specs/v3/AUTHENTICATION.md`. Per `AUTH-12` neither the request form, the response body, nor any credential is ever logged: the Debug entries carry only the endpoint, the `grant_type`, the token type, the lifetime, and whether a refresh token came back. Unlike well-known discovery, a token request is never retried here — a token POST is not idempotent and a failed grant is a decision for the caller, not a transport retry. ## Examples ```csharp theme={null} var form = new Dictionary<string, string>(StringComparer.Ordinal) { [ODataMcpAuthConstants.GrantTypeParameter] = ODataMcpAuthConstants.GrantTypeRefreshToken, [ODataMcpAuthConstants.RefreshTokenProperty] = refreshToken }; var response = await tokenEndpointClient.PostAsync( metadata.TokenEndpoint!, form, clientId, clientSecret, TokenEndpointClient.AuthMethodClientSecretPost, cancellationToken); ``` ## Constructors ### .ctor Initializes a new instance of the [TokenEndpointClient](https://ai.easyaf.dev/odata-mcp/api-reference/Microsoft/OData/Mcp/Authentication/Outbound/TokenEndpointClient.md) class. #### Syntax ```csharp theme={null} public TokenEndpointClient(System.Net.Http.IHttpClientFactory httpClientFactory, Microsoft.Extensions.Logging.ILogger logger) ``` #### Parameters | Name | Type | Description | | - | - | - | | `httpClientFactory` | `System.Net.Http.IHttpClientFactory` | The factory used to create the `"OAuth"` named client per call. | | `logger` | `Microsoft.Extensions.Logging.ILogger` | The logger this instance records token request and response shapes to. | #### Exceptions | Exception | Description | | - | - | | `ArgumentNullException` | Thrown when *httpClientFactory* or *logger* is [`null`](https://learn.microsoft.com/dotnet/csharp/language-reference/keywords/null). | ### .ctor Inherited > [!NOTE] > > Inherited from `object` #### Syntax ```csharp theme={null} public Object() ``` ## Methods ### Equals Inherited Virtual > [!NOTE] > > Inherited from `object` #### Syntax ```csharp theme={null} public virtual bool Equals(object obj) ``` #### Parameters | Name | Type | Description | | - | - | - | | `obj` | `object?` | - | #### Returns Type: `bool` ### Equals Inherited > [!NOTE] > > Inherited from `object` #### Syntax ```csharp theme={null} public static bool Equals(object objA, object objB) ``` #### Parameters | Name | Type | Description | | - | - | - | | `objA` | `object?` | - | | `objB` | `object?` | - | #### Returns Type: `bool` ### GetHashCode Inherited Virtual > [!NOTE] > > Inherited from `object` #### Syntax ```csharp theme={null} public virtual int GetHashCode() ``` #### Returns Type: `int` ### GetType Inherited > [!NOTE] > > Inherited from `object` #### Syntax ```csharp theme={null} public System.Type GetType() ``` #### Returns Type: `System.Type` ### MemberwiseClone Inherited > [!NOTE] > > Inherited from `object` #### Syntax ```csharp theme={null} protected internal object MemberwiseClone() ``` #### Returns Type: `object` ### PostAsync Posts a token request and returns the RFC 6749 section 5.1 success response. #### Syntax ```csharp theme={null} public System.Threading.Tasks.Task PostAsync(System.Uri tokenEndpoint, System.Collections.Generic.IReadOnlyDictionary form, string clientId, string clientSecret, string authMethod, System.Threading.CancellationToken cancellationToken) ``` #### Parameters | Name | Type | Description | | - | - | - | | `tokenEndpoint` | `System.Uri` | The absolute token endpoint to post to. | | `form` | `System.Collections.Generic.IReadOnlyDictionary` | The grant-specific form fields, such as `grant_type` and `device_code`. Client credentials are added by this method, not by the caller. | | `clientId` | `string?` | The client identifier, or [`null`](https://learn.microsoft.com/dotnet/csharp/language-reference/keywords/null) when the grant carries none. | | `clientSecret` | `string?` | The client secret, or [`null`](https://learn.microsoft.com/dotnet/csharp/language-reference/keywords/null) for a public client. | | `authMethod` | `string` | The token endpoint authentication method: [TokenEndpointClient.AuthMethodClientSecretBasic](https://ai.easyaf.dev/odata-mcp/api-reference/Microsoft/OData/Mcp/Authentication/Outbound/TokenEndpointClient.md#authmethodclientsecretbasic), [TokenEndpointClient.AuthMethodClientSecretPost](https://ai.easyaf.dev/odata-mcp/api-reference/Microsoft/OData/Mcp/Authentication/Outbound/TokenEndpointClient.md#authmethodclientsecretpost), or [TokenEndpointClient.AuthMethodNone](https://ai.easyaf.dev/odata-mcp/api-reference/Microsoft/OData/Mcp/Authentication/Outbound/TokenEndpointClient.md#authmethodnone). | | `cancellationToken` | `System.Threading.CancellationToken` | The token that cancels the request. | #### Returns Type: `System.Threading.Tasks.Task` The parsed success response, whose [TokenEndpointResponse.AccessToken](https://ai.easyaf.dev/odata-mcp/api-reference/Microsoft/OData/Mcp/Authentication/Outbound/TokenEndpointResponse.md#accesstoken) is guaranteed non-empty. #### Exceptions | Exception | Description | | - | - | | `ArgumentNullException` | Thrown when *tokenEndpoint* or *form* is [`null`](https://learn.microsoft.com/dotnet/csharp/language-reference/keywords/null). | | `ArgumentException` | Thrown when *authMethod* is [`null`](https://learn.microsoft.com/dotnet/csharp/language-reference/keywords/null), empty, whitespace, or a method | | this client does not implement; when *tokenEndpoint* is relative or is an | | | `http` URI whose host is not loopback; or when *authMethod* requires | | | credentials that *clientId* or *clientSecret* does not supply. | | | `OAuthTokenException` | Thrown when the server answers with a non-success status, when the success body carries no | | `access_token` or cannot be parsed, or when the request fails at the transport. | | #### Remarks The RFC 8707 `resource` indicator and `scope` are the caller's to place in *form*; this method never invents either, so a grant that must omit `resource` simply leaves it out. Cancellation requested through *cancellationToken* propagates as [OperationCanceledException](https://learn.microsoft.com/dotnet/api/system.operationcanceledexception) rather than being wrapped. ### ReferenceEquals Inherited > [!NOTE] > > Inherited from `object` #### Syntax ```csharp theme={null} public static bool ReferenceEquals(object objA, object objB) ``` #### Parameters | Name | Type | Description | | - | - | - | | `objA` | `object?` | - | | `objB` | `object?` | - | #### Returns Type: `bool` ### ToString Inherited Virtual > [!NOTE] > > Inherited from `object` #### Syntax ```csharp theme={null} public virtual string ToString() ``` #### Returns Type: `string?` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.