---
title: "Create new token without invalidating the old one"
method: POST
path: "/v1/auth/token/"
---

# Create new token without invalidating the old one

`POST /v1/auth/token/`

## Request

- Base URL: `https://app.iconik.io/API/auth`
- URL: `https://app.iconik.io/API/auth/v1/auth/token/`
- Auth: none declared. Required headers: `App-ID`, `Auth-Token`
- TypeScript: <https://skmtc.dev/iconik/apis/iconik-auth/docs/v1/auth/token/post.ts> (a function with typed inputs; its response is checked against the schema)

## Query parameters

- `expires_in` integer

## Headers

- `App-ID` string, required
- `Auth-Token` string, required

## Response `201`

Returns a new token

- TokenSchema
  - `app_id` string, uuid
  - `auth_system_domains` MultiDomainUserSystemSchema[]
    - `logo_url` string, url
    - `mfa_methods` string[]
    - `mfa_methods_configured` string[]
    - `mfa_required` boolean
    - `mfa_required_configured` boolean
    - `platform_url` string, url
    - `system_domain_id` string, uuid, required
    - `system_domain_name` string
    - `url` string, url
  - `date_created` string, date-time
  - `date_modified` string, date-time
  - `expires` string, date-time
  - `id` string, uuid
  - `is_admin` boolean
  - `is_mfa_authenticated` boolean
  - `is_saml_authenticated` boolean
  - `is_super_admin` boolean
  - `is_super_admin_light` boolean
  - `system_domain_id` string, uuid
  - `system_domain_is_plg` boolean
  - `system_domain_status` 'ACTIVE' | 'WARNING' | 'FROZEN' | 'DEACTIVATED'
  - `system_domain_type` string
  - `system_domain_warning_message` string
  - `system_domains` string[]
  - `token` string, required
  - `user_id` string, uuid

## Other responses

- `400`: Bad request
- `401`: Token is invalid
- `403`: OAuth tokens can't create new tokens
- `default`: Error response

---

[API](https://skmtc.dev/iconik/apis/iconik-auth.md) - [All operations](https://skmtc.dev/iconik/apis/iconik-auth/llms.txt) - [OpenAPI document](https://skmtc.dev/iconik/apis/iconik-auth/revisions/5dde985bb742?raw)