refresh_token flow is used to exchange a temporary grant of type
refresh_token for an access token when the current access token has expired. The access token received through the endpoint is valid for 180 days, after which the entire authorization flow must be reconfigured.
The flow allows you to continue using a valid access token with the same characteristics as the original token without the need for a new interaction with the user. By performing this flow, the original token is exchanged for a new one which also offers the ability to limit scopes by returning a new refresh token for future exchange.
To renew the access token:
- Send the
refresh_tokencode, your credentials, and the
authorization_code(see Creation) to the /oauth/token endpoint with the
refresh_tokencode in the
grant_typeparameter to receive a new response with a new access token and a new
- Update the application with the access token received in the response.