Exchange Auth Token

post/auth/token

This endpoint can be used to request a new access token using a refresh token.

Request

Header Parameters

originstringrequired
Origin header to specify the origin of the request.

Body application/json

refreshTokenstringrequired
JWT that is used to request a new access token. (Valid for 30 days.)
clientApplicationIdstringrequired
Id of the client application.

Response

Successful operation.

Body application/json

accessTokenstring
The new access token that will be used for subsequent authenticated requests. This token replaces the previous access token that has expired or is about to expire.
refreshTokenstring
The new refresh token to request a new access token.

REFRESH_TOKEN_EXPIRED The refresh token has expired.

CLIENT_APPLICATION_MISMATCH The client application does not match the refresh token.

ORIGIN_NOT_ALLOWED The origin is not allowed to access this endpoint.

Body application/json

statusCodeintegerrequired
statusNamestringrequired
errorCodestringrequired
reasonstring

Example

Example Request

Server

curl https://api.immersve.com/auth/token \
  --request POST \
  --header 'Content-Type: application/json' \
  --data '{
  "refreshToken": "eyJhbGciOiJSUzI1NiIsI...",
  "clientApplicationId": "29097f50d221858223a17633e36716f9"
}'

curl https://test.immersve.com/auth/token \
  --request POST \
  --header 'Content-Type: application/json' \
  --data '{
  "refreshToken": "eyJhbGciOiJSUzI1NiIsI...",
  "clientApplicationId": "29097f50d221858223a17633e36716f9"
}'

Example Response

{
  "accessToken": "eyJhbGciOiJSUzI1NiIsI...",
  "refreshToken": "eyJhbGciOiJSUzI1NiIsI..."
}

{
  "statusCode": 403,
  "statusName": "Forbidden",
  "errorCode": "FORBIDDEN",
  "reason": "Unauthorized"
}