OAuth Token Refresh
Access tokens are only valid for a given period of time (typically one hour) for security reasons. Whenever acquiring an new access token its TTL is also given (see expires_in), along with a refresh token that can be used to acquire a new access token after the current one has expired.
Authentication
AuthorizationBasic
Basic authentication of the form Basic <username:password>.
OR
AuthorizationBearer
Bearer authentication of the form Bearer <token>, where token is your auth token.
Request
This endpoint expects an object.
grant_type
When refreshing an existing token use refresh_token.
refresh_token
The token provided when you got the expired access token.
client_id
The client ID for your API app. Required for new API apps. To enhance security, we recommend making it required for existing apps in your app settings.
client_secret
The client secret for your API app. Required for new API apps. To enhance security, we recommend making it required for existing apps in your app settings.
Response headers
X-RateLimit-Limit
The maximum number of requests per hour that you can make.
X-RateLimit-Remaining
The number of requests remaining in the current rate limit window.
X-Ratelimit-Reset
The Unix time at which the rate limit will reset to its maximum.
Response
successful operation
access_token
token_type
refresh_token
expires_in
Number of seconds until the access_token expires. Uses epoch time.
state
