Sign in

v1

latestOpenAPI 3.0.3MIT2026-07-1373217576.0 KB
OAuth

OAuth Token Refresh

Access tokens are only valid for a given period of time (typically one hour) for security reasons. Whenever acquiring an new access token its TTL is also given (see expires_in), along with a refresh token that can be used to acquire a new access token after the current one has expired.

post/oauth/token?refresh

Request body

grant_typestring required

When refreshing an existing token use refresh_token.

refresh_tokenstring required

The token provided when you got the expired access token.

client_idstring

The client ID for your API app. Required for new API apps. To enhance security, we recommend making it required for existing apps in your app settings.

client_secretstring

The client secret for your API app. Required for new API apps. To enhance security, we recommend making it required for existing apps in your app settings.

Response

successful operation

access_tokenstring
token_typestring
refresh_tokenstring
expires_ininteger

Number of seconds until the access_token expires. Uses epoch time.

statestring nullable