Renewal
The refresh_token
flow is used to exchange a temporary grant of type refresh_token
for an access token when the current access token is close to expiry. The access token received through the endpoint is valid for 180 days, after which the entire authorization flow must be reconfigured.
The flow allows you to continue using a valid access token with the same characteristics as the original token without the need for a new interaction with the user. By performing this flow, the original token is exchanged for a new one which also offers the ability to limit scopes by returning a new refresh token for future exchange.
To renew the access token:
- Send the
refresh_token
code, your credentials, and theauthorization_code
(see Creation) to the /oauth/token endpoint with therefresh_token
code in thegrant_type
parameter to receive a new response with a new access token and a newrefresh_token
. - Update the application with the access token received in the response.