OAuth

OAuth Token Refresh

Access tokens are only valid for a given period of time (typically one hour) for security reasons. Whenever acquiring an new access token its TTL is also given (see expires_in), along with a refresh token that can be used to acquire a new access token after the current one has expired.

post/oauth/token?refresh

Request body

grant_typestring required

When refreshing an existing token use refresh_token.

refresh_tokenstring required

The token provided when you got the expired access token.

Response

successful operation

access_tokenstring
token_typestring
refresh_tokenstring
expires_ininteger

Number of seconds until the access_token expires. Uses epoch time.

statestring nullable

Changes