---
title: "Refresh Token"
method: POST
path: "/oauth2/refresh_token"
tags: ["Authentication"]
---

# Refresh Token

`POST /oauth2/refresh_token`

This endpoint creates a new access token using a refresh token.

**Request Headers:**
- Content-Type: application/x-www-form-urlencoded

<Warning>
**Important Notes:**

- Refresh token duration is 600 seconds
- Rate limit: 1 request per second
- The IP of the client must be added to WB Allowlist
</Warning>

## Response `200`

Successful token refresh

- object
  - `data` object
    - `access_token` string — The new access token for API requests
    - `expires_in` integer — Token expiration time in seconds
    - `refresh_token` string — New refresh token
    - `scope` string — Comma-separated list of granted scopes
    - `token_type` string — Type of the token

## Other responses

- `400` — Invalid token

---

[API](https://skmtc.net/whitebit/apis/whitebit-private-http-api-v4.md) · [All operations](https://skmtc.net/whitebit/apis/whitebit-private-http-api-v4/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/whitebit/whitebit-private-http-api-v4/revisions/76c9def9942f/schema)