TOtotalpass
Authentication

Exchange a refresh token for a new token pair

Uses a valid refresh token to issue a new access token and refresh token pair. The old refresh token is invalidated after use. If token reuse is detected (the same refresh token used more than once), all active sessions are revoked.

post/api/v1/refresh

Request

  • Base URL
    https://company-eligibles-api.totalpass.com
  • URL
    https://company-eligibles-api.totalpass.com/api/v1/refresh
  • Auth
    none required

Request body

refresh_tokenstring required

Opaque refresh token obtained from login or a previous refresh

Response

Tokens refreshed successfully

access_tokenstring required

New short-lived JWT access token

refresh_tokenstring required

New opaque refresh token

token_typestring required
expires_ininteger required

Access token TTL in seconds

Example response

{
  "token_type": "Bearer",
  "expires_in": 86400
}

Changes

No recorded changes to this operation across all 2 revisions of this API.