POST

/oauth/token

A refresh token is invalidated 1 minute after use. Please ensure you’re persisting both the newly minted access and refresh token. Failure to do so will require the user to go through Connect again after the access token has expired.

​
Request

Headers

Authorizationrequired
string

HTTP Basic Auth header containing the client_id and client_secret. The header is formed by concatenating the word “Basic”, a space, and a base64-encoded string consisting of the client_id, a colon :, and the client_secret.

Content-Typerequired
string

Must be set to application/x-www-form-urlencoded, matching the format of the request body.

User-Agentrequired
string

A valid HTTP User Agent value.

Query

grant_typerequired

This value must be set to refresh_token

refresh_tokenrequired

The refresh token received in the response with the access token from an auth code exchange or prior token refresh.

  curl https://auth.smartcar.com/oauth/token \
    -X POST \
    -H 'Authorization: Basic base64({client_id}:{client_secret})' \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -d 'grant_type=refresh_token \
        &refresh_token=3e565aed-d4b2-4296-9b4c-aec35825a6aa'

​
Response

access_token

A string representing an access token used to make requests to the Smartcar API.

expires_in

The number of seconds the access token is valid for. This is always set to 7200 (2 hours)

refresh_token

A string representing a refresh token, which is used to renew access when the current access token expires. The refresh token expires after 60 days.

token_type

Always set to Bearer.

{
  "access_token": "cf7ba7e9-8c5d-417d-a99f-c386cfc235cc",
  "token_type": "Bearer",
  "expires_in": 7200,
  "refresh_token": "3e565aed-d4b2-4296-9b4c-aec35825a6aa"
}