---
title: "Force refresh tokens"
method: POST
path: "/v2/oauth-clients/{clientId}/users/{userId}/force-refresh"
tags: ["Deprecated: Platform / Managed Users"]
---

# Force refresh tokens

`POST /v2/oauth-clients/{clientId}/users/{userId}/force-refresh`

<Warning>These endpoints are deprecated and will be removed in the future.</Warning> If you have lost managed user access or refresh token, then you can get new ones by using OAuth credentials. Access token is valid for 60 minutes and refresh token for 1 year. Make sure to store them in your database, for example, in your User database model `calAccessToken` and `calRefreshToken` fields.
Response also contains `accessTokenExpiresAt` and `refreshTokenExpiresAt` fields, but if you decode the jwt token the payload will contain `clientId` (OAuth client ID), `ownerId` (user to whom token belongs ID), `iat` (issued at time) and `expiresAt` (when does the token expire) fields.

## Path parameters

- `userId` number, required
- `clientId` string, required

## Headers

- `x-cal-secret-key` string, required

## Response `200`

- KeysResponseDto
  - `status` 'success' | 'error', required
  - `data` KeysDto, required
    - `accessToken` string, required
    - `refreshToken` string, required
    - `accessTokenExpiresAt` number, required
    - `refreshTokenExpiresAt` number, required

---

[API](https://skmtc.net/calcom/apis/cal-diy-api-v2.md) · [All operations](https://skmtc.net/calcom/apis/cal-diy-api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/calcom/cal-diy-api-v2/revisions/16de9d3eb7b3/schema)