Get started

Refresh an access token

Renew access without sending your password again.

POST/v1/auth/token

No account role requiredNo access token required.

This account endpoint is public. Input and account verification still apply.

How it works

Use the refresh token returned by sign-in. No bearer token or organization header is required. Store any returned replacement refreshToken atomically; if none is returned, keep the previous one. Access-token expiry never extends organization membership or administrator rights. If renewal fails with 401, authenticate again. Flowg8 does not store these tokens.

Request body

grantTypestringrequiredrefresh_token

refreshTokenstringrequiredmin length 1 · max length 4096

Required fields & full validation schema → OpenAPI

Request essentials

Authorization: Not required
X-Organization-Id: Not required

Have an implementation question?Ask about this endpoint. Answers include source references.

Get started

Refresh an access token

Renew access without sending your password again.

POST/v1/auth/token

No account role requiredNo access token required.

This account endpoint is public. Input and account verification still apply.

How it works

Request body

grantTypestringrequiredrefresh_token

refreshTokenstringrequiredmin length 1 · max length 4096

Required fields & full validation schema → OpenAPI

Request essentials

Authorization: Not required
X-Organization-Id: Not required

Have an implementation question?Ask about this endpoint. Answers include source references.

Refresh an access token

How it works

Request body

Request essentials

Ask the docs

Refresh an access token

How it works

Request body

Request essentials

Ask the docs