---
updatedAt: 2026-06-04T16:54:59.000Z
agentTools:
  projectIndex: https://doc.fintecture.com/llms.txt
---

# Create refresh token

The refresh token API is used to generate a new access_token and invalidate
the previous one. This allows clients to continue to have a valid access token
without further interaction with the user.


# OpenAPI definition

```json
{
  "openapi": "3.0.3",
  "info": {
    "title": "API EXPLORER",
    "version": "3.0.0",
    "description": "Public API\n",
    "contact": {
      "name": "Support",
      "email": "noelia.rodriguez@fintecture.com"
    }
  },
  "x-readme": {
    "explorer-enabled": false,
    "proxy-enabled": false,
    "samples-languages": [
      "curl",
      "javascript",
      "ruby"
    ]
  },
  "servers": [
    {
      "url": "https://api.sandbox.fintecture.com",
      "description": "Sandbox server"
    },
    {
      "url": "https://api.fintecture.com",
      "description": "Production server"
    }
  ],
  "paths": {
    "/oauth/refreshtoken": {
      "post": {
        "security": [
          {
            "BasicApikeyTrickAuth": []
          }
        ],
        "requestBody": {
          "$ref": "#/components/requestBodies/OAuthRefreshTokenRequest"
        },
        "tags": [
          "authentication"
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/OAuthRefreshToken"
                }
              }
            },
            "description": "successful operation"
          },
          "400": {
            "$ref": "#/components/responses/400-BadRequest"
          },
          "401": {
            "$ref": "#/components/responses/401-Unauthorized"
          },
          "403": {
            "$ref": "#/components/responses/403-Forbidden"
          },
          "500": {
            "$ref": "#/components/responses/500-InternalServerError"
          }
        },
        "operationId": "createRefreshToken",
        "summary": "Create refresh token",
        "description": "The refresh token API is used to generate a new access_token and invalidate\nthe previous one. This allows clients to continue to have a valid access token\nwithout further interaction with the user.\n"
      }
    }
  },
  "components": {
    "requestBodies": {
      "OAuthRefreshTokenRequest": {
        "content": {
          "application/x-www-form-urlencoded": {
            "schema": {
              "$ref": "#/components/schemas/OAuthRefreshTokenRequest"
            }
          }
        },
        "required": true
      }
    },
    "responses": {
      "400-BadRequest": {
        "content": {
          "application/json": {
            "schema": {
              "$ref": "#/components/schemas/APIResponse400"
            }
          }
        },
        "description": "bad request"
      },
      "401-Unauthorized": {
        "content": {
          "application/json": {
            "schema": {
              "$ref": "#/components/schemas/APIResponse401"
            }
          }
        },
        "description": "unauthorized"
      },
      "403-Forbidden": {
        "content": {
          "application/json": {
            "schema": {
              "$ref": "#/components/schemas/APIResponse403"
            }
          }
        },
        "description": "forbidden"
      },
      "500-InternalServerError": {
        "content": {
          "application/json": {
            "schema": {
              "$ref": "#/components/schemas/APIResponse500"
            }
          }
        },
        "description": "internal server error"
      }
    },
    "schemas": {
      "APIResponse400": {
        "title": "400 API Response",
        "description": "Definition of the standard API reponse when a 400",
        "type": "object",
        "properties": {
          "status": {
            "format": "int32",
            "description": "HTTP status code",
            "type": "integer",
            "example": 400
          },
          "code": {
            "type": "string",
            "enum": [
              "bad_request",
              "provider_error"
            ],
            "example": "bad_request"
          },
          "log_id": {
            "allOf": [
              {
                "$ref": "#/components/schemas/IdentifierUuidV4"
              },
              {
                "description": "Log unique identifier"
              }
            ]
          },
          "errors": {
            "description": "Errors returned",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/APIResponse400Error"
            }
          }
        }
      },
      "APIResponse400Error": {
        "title": "API Response 400 Error",
        "description": "API Response 400 Error description",
        "type": "object",
        "properties": {
          "code": {
            "type": "string",
            "enum": [
              "bad_request",
              "customer_unknown",
              "account_unknown",
              "session_id_invalid_or_expired",
              "invalid_field",
              "mandatory_field_missing",
              "invalid_debited_account"
            ],
            "example": "bad_request"
          },
          "title": {
            "description": "Title message",
            "type": "string",
            "example": "Bad request"
          },
          "message": {
            "description": "Error message",
            "type": "string",
            "example": "Invalid parameters or malformed syntax."
          }
        }
      },
      "APIResponse401": {
        "title": "401 API Response",
        "description": "Definition of the standard API reponse when a 401",
        "type": "object",
        "properties": {
          "status": {
            "format": "int32",
            "description": "HTTP status code",
            "type": "integer",
            "example": 401
          },
          "code": {
            "type": "string",
            "enum": [
              "unauthorized"
            ],
            "example": "unauthorized"
          },
          "log_id": {
            "allOf": [
              {
                "$ref": "#/components/schemas/IdentifierUuidV4"
              },
              {
                "description": "Log unique identifier"
              }
            ]
          },
          "errors": {
            "description": "Errors returned",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/APIResponse401Error"
            }
          }
        }
      },
      "APIResponse401Error": {
        "title": "API Response 401 Error",
        "description": "API Response 401 Error description",
        "type": "object",
        "properties": {
          "code": {
            "type": "string",
            "enum": [
              "invalid_token",
              "invalid_scopes",
              "invalid_code",
              "invalid_app_id",
              "invalid_app_url"
            ],
            "example": "bad_request"
          },
          "title": {
            "description": "Title message",
            "type": "string",
            "example": "Invalid token"
          },
          "message": {
            "description": "Error message",
            "type": "string",
            "example": "The token is either invalid or expired."
          }
        }
      },
      "APIResponse403": {
        "title": "403 API Response",
        "description": "Definition of the standard API reponse when a 403",
        "type": "object",
        "properties": {
          "status": {
            "format": "int32",
            "description": "HTTP status code",
            "type": "integer",
            "example": 403
          },
          "code": {
            "type": "string",
            "enum": [
              "forbidden"
            ],
            "example": "forbidden"
          },
          "log_id": {
            "allOf": [
              {
                "$ref": "#/components/schemas/IdentifierUuidV4"
              },
              {
                "description": "Log unique identifier"
              }
            ]
          },
          "errors": {
            "description": "Errors returned",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/APIResponse403Error"
            }
          }
        }
      },
      "APIResponse403Error": {
        "title": "API Response 403 Error",
        "description": "API Response 403 Error description",
        "type": "object",
        "properties": {
          "code": {
            "type": "string",
            "enum": [
              "forbidden"
            ],
            "example": "forbidden"
          },
          "title": {
            "description": "Title message",
            "type": "string",
            "example": "Forbidden"
          },
          "message": {
            "description": "Error message",
            "type": "string",
            "example": "Access Forbidden."
          }
        }
      },
      "APIResponse500": {
        "title": "500 API Response",
        "description": "Definition of the standard API reponse when a 500",
        "type": "object",
        "properties": {
          "status": {
            "format": "int32",
            "description": "HTTP status code",
            "type": "integer",
            "example": 500
          },
          "code": {
            "type": "string",
            "enum": [
              "internal_server_error"
            ],
            "example": "internal_server_error"
          },
          "log_id": {
            "allOf": [
              {
                "$ref": "#/components/schemas/IdentifierUuidV4"
              },
              {
                "description": "Log unique identifier"
              }
            ]
          },
          "errors": {
            "description": "Errors returned",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/APIResponse500Error"
            }
          }
        }
      },
      "APIResponse500Error": {
        "title": "API Response 500 Error",
        "description": "API Response 500 Error description",
        "type": "object",
        "properties": {
          "code": {
            "type": "string",
            "enum": [
              "internal_server_error"
            ],
            "example": "internal_server_error"
          },
          "title": {
            "description": "Title message",
            "type": "string",
            "example": "Internal Server Error"
          },
          "message": {
            "description": "Error message",
            "type": "string",
            "example": "An internal error has occurred. If the error persists, please contact our support."
          }
        }
      },
      "IdentifierUuidV4": {
        "title": "UUID V4 identifier",
        "description": "UUID V4 identifier",
        "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
        "type": "string",
        "example": "dc5b0048-2a80-4a22-b2f9-fad7d72f074d"
      },
      "OAuthRefreshToken": {
        "title": "oAuth refresh token",
        "description": "oAuth refresh token",
        "type": "object",
        "properties": {
          "token_type": {
            "enum": [
              "Bearer"
            ],
            "type": "string",
            "example": "Bearer"
          },
          "access_token": {
            "type": "string",
            "example": "eyJhbGciOiJub25lIn0.eyJleHAiOjE1MTQwODA0MjQsI"
          }
        }
      },
      "OAuthRefreshTokenRequest": {
        "title": "oAuth refresh token request",
        "description": "Description of oAuth refresh token request",
        "type": "object",
        "required": [
          "grant_type",
          "refresh_token"
        ],
        "properties": {
          "grant_type": {
            "description": "Type of requested authorization",
            "enum": [
              "refresh_token"
            ],
            "type": "string",
            "example": "refresh_token"
          },
          "refresh_token": {
            "description": "Refresh token",
            "type": "string",
            "example": "eyJhbGciOiJub25lIn0.eyJleHAiOjE1MTQwODA0MjQsI..."
          }
        }
      }
    },
    "securitySchemes": {
      "BasicApikeyTrickAuth": {
        "type": "apiKey",
        "description": "Your app_id and app_secret have to be combined with a : to form a base64-encoded string",
        "x-default": "Basic {base64({appId}:{app_secret})}",
        "in": "header",
        "name": "authorization"
      }
    }
  },
  "tags": [
    {
      "name": "authentication",
      "description": "Authentication related endpoints",
      "x-displayName": "Authentication"
    }
  ]
}
```