Company logoTrust Center Documentation

Refresh access token

Exchange an existing access token for a new one using the embedded refresh token ID. This endpoint implements:

  • Token rotation (old refresh token is invalidated)
  • Rate limiting (1ms minimum interval per refresh token)
  • Automatic cleanup of expired tokens
  • Security validation of token chains
POST
/api/v1/refresh
accessTokenstring

Current access token (can be expired)

Response Body

const body = JSON.stringify({
  "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
})

fetch("https://app.orbiqhq.com/api/v1/refresh", {
  body
})

{
  "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
}

{
  "error": "Missing or invalid accessToken in body"
}

{
  "error": "Invalid or malformed old access token"
}

{
  "error": "Method not allowed"
}
{
  "error": "Conflict"
}

{
  "error": "Token refresh failed."
}

How is this guide?