Sign in
OAuth

OAuth Token Refresh

Access tokens are only valid for a given period of time (typically one hour) for security reasons. Whenever acquiring an new access token its TTL is also given (see expires_in), along with a refresh token that can be used to acquire a new access token after the current one has expired.

post/oauth/token?refresh

Request body

grant_typestring required

When refreshing an existing token use refresh_token.

refresh_tokenstring required

The token provided when you got the expired access token.

client_idstring

The client ID for your API app. Mandatory from August 1st, 2025. Until then, required if the "Client Credentials Required" setting is enabled for token refresh; optional if disabled.

client_secretstring

The client secret for your API app. Mandatory from August 1st, 2025. Until then, required if the "Client Credentials Required" setting is enabled for token refresh; optional if disabled.

Response

successful operation

access_tokenstring
token_typestring
refresh_tokenstring
expires_ininteger

Number of seconds until the access_token expires. Uses epoch time.

statestring nullable

Changes