Auth Token Exchange

This endpoint can be used to request a new access token using a refresh token.

Header Parameters

• origin string required

  Origin header to specify the origin of the request.

application/json

Request Body required

• refreshToken string required

  JWT that is used to request a new access token. (Valid for 30 days.)

• clientApplicationId string required

  Id of the client application.

Responses

• 200
• 403

---

successful operation

application/json

• Schema
• Example (from schema)

---

Schema

• accessToken string

  The new access token that will be used for subsequent authenticated requests. This token replaces the previous access token that has expired or is about to expire.

• refreshToken string

  The new refresh token to request a new access token.

{
  "accessToken": "eyJhbGciOiJSUzI1NiIsI...",
  "refreshToken": "eyJhbGciOiJSUzI1NiIsI..."
}

REFRESH_TOKEN_EXPIRED The refresh token has expired.

CLIENT_APPLICATION_MISMATCH The client application does not match the refresh token.

ORIGIN_NOT_ALLOWED The origin is not allowed to access this endpoint.

application/json

• Schema
• Example (from schema)

---

Schema

• statusCode integer required
• statusName string required
• errorCode string required
• reason string

{
  "statusCode": 403,
  "statusName": "Forbidden",
  "errorCode": "FORBIDDEN",
  "reason": "Unauthorized"
}

Loading...