Refresh Token

POST <https://auth3.upbond.io/oauth/token>
Content-Type: application/x-www-form-urlencoded

grant_type=refresh_token&client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET&refresh_token=YOUR_REFRESH_TOKEN
curl --request POST \\
  --url '<https://auth3.upbond.io/oauth/token>' \\
  --header 'content-type: application/x-www-form-urlencoded' \\
  --data 'grant_type=refresh_token&client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET&refresh_token=YOUR_REFRESH_TOKEN'
var request = require("request");

var options = {
  method: 'POST',
  url: '<https://auth3.upbond.io/oauth/token>',
  headers: { 'content-type': 'application/x-www-form-urlencoded' },
  form: {
    grant_type: 'refresh_token',
    client_id: 'YOUR_CLIENT_ID',
    client_secret: 'YOUR_CLIENT_SECRET',
    refresh_token: 'YOUR_REFRESH_TOKEN'
  }
};

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});

RESPONSE SAMPLE:

HTTP/1.1 200 OK
Content-Type: application/json
{
  "access_token": "eyJ...MoQ",
  "expires_in": 86400,
  "scope": "openid offline_access",
  "id_token": "eyJ...0NE",
  "token_type": "Bearer"
}

Use this endpoint to refresh an Access Token using the Refresh Token provided during the authorization process.

Request Parameters

Parameter
Description

grant_type Required

Denotes the flow being used. For refreshing a token, use refresh_token.

client_id Required

Your application's Client ID.

client_secret

Your application's Client Secret. This is required when the Token Endpoint Authentication Method field is configured as Post or Basic.

refresh_token Required

The refresh token provided during the authorization process.

scope

A space-separated list of scopes to request. If not included, the original scopes will be used. If provided, only a reduced set of the original scopes can be requested. Make sure this value is URL-encoded.

Last updated

Was this helpful?