Once an access token expires (or is about to expire), you may regenerate another access token without having the user re-grant access by using the refresh_token provided to you alongside the expired or expiring access_token.
The refresh tokens expire in 90 days. Any attempt to use a refresh token that has already been used will result in the revocation of all tokens associated, and you will need the user to grant you access again. You should discard the current refresh_token once you receive a new access_token/refresh_token pair.
Authentication Requirements: Basic Auth, with your client Id as the username and client secret as the password.
|Required||This must be set to “|
|Required||This must be the refresh_token associated with the most recent access_token acquired for this Bloomerang user.|
|Optional||Must not be greater than the scope originally granted, but a lesser scope may be provided. If omitted, the new access token will have the same scope as the previous access token.|
|A string value used to authorize your requests to the API on behalf of the user who granted access.|
|This will always be “Bearer”|
|The number of seconds in which this token will expire|
|The scope associated with the access token|
|A new refresh token. This can be used to generate another access token once the current one expires.|
Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW