API v1 ReferenceRefresh
Refresh access token
Exchange an existing access token for a new one using the embedded refresh token ID. This endpoint implements:
- Token rotation (old refresh token is invalidated)
- Rate limiting (1ms minimum interval per refresh token)
- Automatic cleanup of expired tokens
- Security validation of token chains
Request Body
application/json
accessToken*string
Current access token (can be expired)
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://app.orbiqhq.com/api/v1/refresh" \ -H "Content-Type: application/json" \ -d '{ "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..." }'{
"accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
}{
"error": "Missing or invalid accessToken in body"
}{
"error": "Invalid or malformed old access token"
}{
"error": "Method not allowed"
}{
"error": "Conflict"
}{
"error": "Token refresh failed."
}How is this guide?