Skip to main content
POST
/
token
/
user
Refresh Token
curl --request POST \
  --url https://stagingstores.xoxoday.com/chef/v1/oauth/token/user \
  --header 'Content-Type: application/json' \
  --data '
{
  "grant_type": "refresh_token",
  "refresh_token": "XXXXXXXXX",
  "client_id": "XXXXXXXXX",
  "client_secret": "XXXXXXXXX"
}
'
{
  "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "bearer",
  "expires_in": 1296000,
  "refresh_token": "dGhpcyBpcyBhIHJlZnJlc2ggdG9rZW4...",
  "access_token_expiry": "1718000000000",
  "refresh_token_expiry": "1720000000000"
}

Documentation Index

Fetch the complete documentation index at: https://help-plum.xoxoday.com/llms.txt

Use this file to discover all available pages before exploring further.

​
Request Schema

ParameterTypeRequiredDescription
grant_typestringYesMust be "refresh_token" for this API.
refresh_tokenstringYesThe previously issued refresh token used to obtain a new access token.
client_idstringYesThe client identifier provided by Xoxoday.
client_secretstringYesThe client secret associated with the client ID. Used to authenticate the refresh request.

​
Response Schema

ParameterTypeDescription
access_tokenstringNewly issued access token to be used for authenticated API calls.
token_typestringToken type. Always "bearer".
expires_innumberLifetime of the access token in seconds.
refresh_tokenstringNewly issued refresh token. Use this to generate new access tokens when current one expires.
access_token_expirystringEpoch timestamp (milliseconds) indicating expiry time of the access token.
refresh_token_expirystringEpoch timestamp (milliseconds) indicating expiry of the refresh token.
📘 Learn how to manage your access and refresh tokens here.

Body

application/json
​
grant_type
enum<string>
required

Must be "refresh_token".

Available options:
refresh_token
​
refresh_token
string
required

The previously issued refresh token.

​
client_id
string
required

Client identifier provided by Xoxoday.

​
client_secret
string
required

Client secret associated with the client ID.

Response

New tokens issued successfully.

​
access_token
string

Newly generated access token.

​
token_type
string
Example:

"bearer"

​
expires_in
number

Lifetime of the access token in seconds.

​
refresh_token
string

Newly issued refresh token. Old one is immediately invalidated.

​
access_token_expiry
string

Epoch timestamp (ms) when the access token expires.

​
refresh_token_expiry
string

Epoch timestamp (ms) when the refresh token expires.