Refresh an access token
Rotate refresh tokens without expanding the customer’s authorized scopes.
POST
https://auth.shareai.now/oauth/token- Base URL
https://auth.shareai.now- Authentication
- Public client ID, or confidential client credentials
cURL
curl --fail-with-body 'https://auth.shareai.now/oauth/token' --data-urlencode 'grant_type=refresh_token' --data-urlencode "client_id=$SHAREAI_CLIENT_ID" --data-urlencode "refresh_token=$REFRESH_TOKEN"
This example is for a public client: no secret or Basic authentication. Confidential clients authenticate with their server-side credentials. Replace the stored refresh token atomically after a successful exchange; do not continue using its predecessor.
Refresh cannot add payments or surcharge to an identity-only authorization. Send the customer through authorization again to request additional scopes or changed billing terms. Revoked grants cannot be restored with refresh.
Last updated September 18, 2026