Refresh Token Grant

The access token acquired in step [8] has a limited time to live (1h). If you call the API with an expired token you will receive a response similar to this:

HTTP/1.1 401 Unauthorized
Content-Type: application/json

{
    "httpCode":"401",
    "httpMessage":"Unauthorized",
    "moreInformation":"application is not registered, or active"
}

Once the Authorization Code Grant access token expires, the TPP can use the refresh token received previously to get new tokens. The same token endpoint described in OpenId configuration is used for that.

Example request body:

grant_type=refresh_token&refresh_token=R1****&scope=openid+accounts&client_id=1234567890

Example response:

{
  "token_type": "Bearer",
  "access_token": "T2****",
  "expires_in": 3600,
  "consented_on": 1588074706,
  "scope": "openid accounts",
  "refresh_token": "R2****",
  "refresh_token_expires_in": 7776000
}