---
id: "en/api-post-api-refreshtoken-do"
title: "refresh token"
language: "en"
description: "POST /api/refreshToken.do: Refresh token interface description, including path, method, parameters and return information."
canonical_url: "https://www.babel.cc/public/babelwiki/en/api-post-api-refreshtoken-do.html"
markdown_url: "https://www.babel.cc/public/babelwiki/ai/en/api-post-api-refreshtoken-do.md"
alternates: {"en": "https://www.babel.cc/public/babelwiki/ai/en/api-post-api-refreshtoken-do.md", "zh": "https://www.babel.cc/public/babelwiki/ai/zh/api-post-api-refreshtoken-do.md"}
reading_note: "文档记录不等于当前部署能力；以实际版本、授权模块与配置为准。保留原文的可选、限制及待确认说明，勿补猜接口。 / Documentation is not a guarantee for every deployment. Preserve optional-module requirements, limitations and unresolved API contracts."
---

# Refresh Token

| Property | Value |
| --- | --- |
| Method | `POST` |
| Path | `/api/refreshToken.do` |

## Authentication Header

Use `Authorization: Basic <BASE64_CLIENT_CREDENTIALS>`, where the credentials are `Base64Encode(client_id + ":" + client_secret)`. This endpoint does not use Bearer authentication. Base64 is not encryption: use HTTPS and keep secrets on a trusted server.

## URL Parameters

The source API document specifies these as URL parameters.

| Parameter | Type | Description |
| --- | --- | --- |
| `grant_type` | string | Required; `refresh_token` |
| `refresh_token` | string | Required; previously issued refresh token |



## Response Fields

| Field | Description |
| --- | --- |
| `access_token` | Credential for business API calls |
| `refresh_token` | Refresh credential; the source document specifies a 30-day lifetime |
| `expires_in` | Access-token lifetime in seconds; use the actual response when scheduling refreshes |

Store the latest returned credentials securely. Avoid concurrent refreshes overwriting each other; reauthorize when authentication is no longer valid. Do not expose codes or tokens in logs, monitored URLs, or screenshots. See the [API overview](https://www.babel.cc/public/babelwiki/en/developer-api-overview.html) for business-request headers; Basic authentication here does not apply to every business endpoint.