Skip to main content
POST
OAuth / Refresh Token

Headers

Accept-Language
string

BCP 47 language tag for content negotiation (e.g. en, de-DE).

Example:

"en"

Body

application/json

Exchanges a valid refresh token for a new OAuth 2.0 bearer token, so clients can renew access without resubmitting credentials. Required permission: none (public endpoint)

refresh_token
string
required

The refresh token issued during authentication, used to obtain a new access token.

Required string length: 8 - 2048

Response

OAuth 2.0 token issued for the authenticated principal.

access_token
string
required

Bearer token to send as Authorization: Bearer <access_token>.

refresh_token
string
required

Long-lived token to obtain a new access token without resubmitting credentials.

token_type
string
required

The token type. This endpoint only issues Bearer tokens, so the value is always Bearer.

expires_in
integer<int64>
required

Token lifetime in seconds. RFC 6749 standard.