---
title: "Get Refresh Token"
method: POST
path: "/v1/auth/tokens/refresh"
tags: ["Authorization"]
---

# Get Refresh Token

`POST /v1/auth/tokens/refresh`

Token generated in authToken API will be valid for an hour. Post that access_token will automatically expire. When the access_token is expired, there are two options. 1) use the authToken API to generate a new token 2) use refreshToken API to extend the validity of the current token.The refreshed token will also expire after an hour, refer to expires_at in the response for the validity of the token. When the refreshed token also expires, call again the refreshToken API to extend it further. Like wise a token can extended 3 times, refer to refresh_count in the response. After 3 refresh attempts, token will expire and cannot be extended any further. Need to use authToken API to generate a new token.

## Request body

- RefreshTokenRequest
  - `access_token` string, required — access token obtained from the auth token api

## Response `200`

Success

- RefreshTokenResponse
  - `access_token` string, required — access token obtained from the auth token api
  - `issued_at` string, required — Time in UTC at which the token was issued at
  - `expires_at` string, required — Time in UTC till which the token will be valid till
  - `refresh_count` integer, required — The count of refresh token used.It can be used for 3 max refresh count after which the token will expired.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `500` — Internal Server Error

---

[API](https://skmtc.dev/corestack/apis/corestack-external-api.md) · [All operations](https://skmtc.dev/corestack/apis/corestack-external-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/corestack/corestack-external-api/revisions/bf2cdf20826d/schema)