Skip to main content
POST
Refresh the M2M access token

Authorizations

Authorization
string
header
required

API Secret token

X-Authorization
string
header
required

User Access token

Headers

Authorization
string
required

M2M access token

X-CSRF-Token
string

CSRF token required when refresh tokens are stored in cookies

Path Parameters

app_id
string
required

App ID

Response

successful

access
string
required

Newly issued JWT access token

access_expires_at
string<date-time>
required

Timestamp when the new access token expires

csrf
string
required

CSRF token to pair with cookie-based refresh tokens

refresh
string | null

Refresh token if the app uses refresh payloads

refresh_expires_at
string<date-time> | null

Timestamp when the refresh token expires