auth

Refresh an existing API key session using the Spare-issued PS512 refresh JWT.

Verifies the refresh JWT, re-checks IP whitelist and application status, then mints a new access JWT and a new refresh JWT (refresh-token rotation on every successful call).

POST /auth/api-keys/sessions/refresh

post/auth/api-keys/sessions/refresh

Request

  • Base URL: https://api.sandbox.tryspare.ae
  • URL: https://api.sandbox.tryspare.ae/auth/api-keys/sessions/refresh
  • Auth: none declared. Required headers: x-tenant

Headers

x-tenantstring required
Example:UAE

Regulatory jurisdiction the request routes to (e.g. UAE, KSA, MAIN). Match it to the market you're integrating.

refresh-tokenstring

The refresh token issued with your access token, used to renew the session.

Response

Success response

access_tokenstring required

Bearer access token for subsequent API requests.

expires_innumber required

Access token lifetime in seconds.

refresh_expires_innumber required

Refresh token lifetime in seconds.

refresh_tokenstring required

Refresh token for renewing the session.

type'Bearer' required

Variant selector, determines which other fields are required.

Example response

{
  "type": "Bearer"
}

Changes

No recorded changes to this operation across all 1 revision of this API.