refresh

POST

{{base_url}}/v1/auth/refresh

Issues a new access_token using the refresh_token from sign-in, without signing in again.

Call it when the access_token has expired. Pass the refresh token in the token query parameter and the client credentials in the body. If the refresh token is expired or invalid, call sign-in again.

Authorization: not required.

Request

Query Params

Body Params application/jsonRequired

Examples

Responses

🟢200

application/json

New token issued (code = 0) or refresh rejected.

Bodyapplication/json

🟠400

🔴500

Request Example

Shell

JavaScript

Java

Swift

curl --location --globoff '{{base_url}}/v1/auth/refresh?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ3ZWItc2RrLWNsaWVudCIsInR5cCI6InJlZnJlc2gifQ.Qm7Lw2Zx8Cv4Bn1Ka9Ds3Fg6Hj0Rt5Ey2Up8Io4WaN' \
--header 'Content-Type: application/json' \
--data '{
    "client_id": "backend-api-client",
    "client_secret": "s3cr3t-value"
}'

Response Example

200 - Success

{
    "data": {
        "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ3ZWItc2RrLWNsaWVudCIsImV4cCI6MTc2MjI0NjQwMH0.4f8Jm2kq9XyTn1VbQ7cR0sLwZp3eHuGa6dKiOv5MtYs",
        "token_type": "Bearer",
        "expires_in": 3600,
        "scope": "read write",
        "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ3ZWItc2RrLWNsaWVudCIsInR5cCI6InJlZnJlc2gifQ.Qm7Lw2Zx8Cv4Bn1Ka9Ds3Fg6Hj0Rt5Ey2Up8Io4WaN"
    },
    "code": 0,
    "message": "Success"
}

Modified at 2026-11-09 09:28:43

sign-in

Option 1 — compare photo with passport photo