Refresh tokens
3 min
📘 Note For authorization code grants only.
After the authorization code exchange, you can exchange a refresh token for an access token by issuing an HTTPS POST request to Optimizely's authorization server.
The following examples show an example request and a successful response. In the event the user has revoked your access, you will receive an HTTP 400 response.
Definitions
- refresh_token – The refresh token returned from the authorization code exchange.
- client_id – The client ID for your application (see app settings).
- client_secret – The client secret for your application (see app settings).
- grant_type – As defined in the OAuth 2.0 spec, this field must contain a value of refresh_token.
Example POST request
POST https://app.optimizely.com/oauth2/token
?refresh_token=1234567890abcdefghijklmnopqrstuvwxyz
&client_id=123
&client_secret=iamverysecret
&grant_type=refresh_tokenExample JSON response
{
"access_token": "abcdefghijklmnopqrstuvwxyz",
"expires_in": 7200,
"token_type": "bearer"
}