---
title: "Refresh Token"
method: POST
path: "/oauth/token"
---

# Refresh Token

`POST /oauth/token`

The Access token expires in 24 hours by default. Before your access token has expired, you can use this API to issue a new Access token using your refresh token. The refresh token must be the same that you received in the Get Access token API.This will generate a new set of Access token and Refresh token for you. Save them securely in your application against the user. Everytime you refresh a token, you will have to use the latest set of access and refresh tokens.

## Request body

- object
  - `grant_type` 'authorization_code' | 'refresh_token', required
  - `client_id` string, required
  - `client_secret` string, required
  - `redirect_uri` string, required — Omit if doing the Refresh; it's not applicable to Refresh Token case.
  - `code` string, required — Omit if doing the Refresh; it's not applicable to Refresh Token case.
  - `refresh_token` string, required — Omit if doing the Get Token; it's not applicable to Get Token case.

## Response `200`

200

- object
  - `access_token` string
  - `token_type` string
  - `expires_in` integer
  - `refresh_token` string
  - `scope` string
  - `created_at` integer

## Other responses

- `401` — 401

---

[API](https://skmtc.dev/itsacheckmate/apis/open-api.md) · [All operations](https://skmtc.dev/itsacheckmate/apis/open-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/itsacheckmate/open-api/revisions/d6022761527a/schema)