---
title: "Refresh an existing access token"
method: POST
path: "/api/v1/oauth2/refresh"
tags: ["Auth"]
---

# Refresh an existing access token

`POST /api/v1/oauth2/refresh`

Refresh an existing access token

## Request body

- AuthRefreshTokenRequest
  - `refresh_token` string, required — The refresh token obtained from a previous token request

## Response `200`

Success

- AuthTokenResponse
  - `success` boolean, required — Indicates if the request was successful
  - `data` object, required
    - `access_token` string, required — The access token to be used for authenticated requests
    - `refresh_token` string — The refresh token used to obtain a new access token. Returned only when a token is first issued (client_credentials, magic_code, google_id_token grants); the refresh grant does not return a new refresh token, so the original is reused until it expires.
    - `token_type` 'Bearer', required — The type of token issued
    - `expires_in` number, required — The number of seconds until the access token expires

## Other responses

- `400` — Bad Request
- `401` — Unauthorized

---

[API](https://skmtc.net/banqzinc/apis/quidkey-api.md) · [All operations](https://skmtc.net/banqzinc/apis/quidkey-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/banqzinc/quidkey-api/revisions/f86d2bdbcb08/schema)