refreshToken

Public: no authentication required.

Exchanges a refresh token for a new access token and refresh token, and sets new sign-in cookies for web clients. Rate-limited per IP address. No sign-in needed: the refresh token is the credential.

Errors: a failed call returns a GraphQL errors entry, not a field on the result, and data may be null or partial. Read the entry's extensions.code and message; every shape and code is in the Error reference.

Example:

GraphQL

mutation RefreshToken($refreshTokenInput: RefreshTokenInput!) {
  refreshToken(refreshTokenInput: $refreshTokenInput) {
    accessToken
    expiresIn
    mustChangePassword
    organizationId
    partnerId
    refreshToken
    organization {
      id
      code
      postalCode
      registrationNumber
      name
      status
    }
  }
}

cURL

curl -X POST "https://<api-host>/graphql" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  --data @- <<'EOF'
{
  "query": "mutation RefreshToken($refreshTokenInput: RefreshTokenInput!) {\n  refreshToken(refreshTokenInput: $refreshTokenInput) {\n    accessToken\n    expiresIn\n    mustChangePassword\n    organizationId\n    partnerId\n    refreshToken\n    organization {\n      id\n      code\n      postalCode\n      registrationNumber\n      name\n      status\n    }\n  }\n}",
  "variables": {
    "refreshTokenInput": {
      "refreshToken": "string"
    }
  }
}
EOF

Variables:

{
  "refreshTokenInput": {
    "refreshToken": "string"
  }
}

Response:

{
  "data": {
    "refreshToken": {
      "accessToken": "string",
      "expiresIn": 0,
      "mustChangePassword": true,
      "organizationId": "string",
      "partnerId": "string",
      "refreshToken": "string",
      "organization": {
        "id": "string",
        "code": "string",
        "postalCode": "string",
        "registrationNumber": "string",
        "name": "string",
        "status": "string"
      }
    }
  }
}

refreshToken(
  refreshTokenInput: RefreshTokenInput!
): AuthResponse!

Arguments

refreshToken.refreshTokenInput ● RefreshTokenInput! non-null input

The refresh token.

Type

AuthResponse object

The result of a sign in.