Skip to content

Refresh token

Token Renewal is an API that renews access/refresh tokens using the issued refresh token (user_info.refresh_token) after making a login verification and user information retrieval API request.

Note

The access token is valid for 1 hour after issuance, and can be renewed using the refresh token before or after expiration. The validity period of the refresh token is 30 days.

Request URL

Environment URL
Production https://weblogin.withhive.com/oauth/token
Sandbox https://sandbox-weblogin.withhive.com/oauth/token
HTTP Method POST
Content-Type application/json

Request Body

Field Name Type Description Required
grant_type String OAuth 2.0 authorization code flow default: refresh_token Y
client_id String The OAuth 2.0 Client ID generated in the security key settings. You can check it in the Hive console App Center > Security Key Settings. Y
client_secret String The OAuth 2.0 Client Secret generated in the security key settings. You can check it in the Hive console App Center > Security Key Settings. Y
refresh_token String Refresh token Y

Request Body Example

{
  "grant_type": "refresh_token",
  "client_id": "58b48cd3-df47-5b52-2627-3f9c8d01",
  "client_secret": "bec7760b237244c4c818d6174587d8e1",
  "refresh_token": "eyJraWQiOiIwYThlMThkOS1hNmZiLTM3ZDMtNjkwYy02Zjg1ZTllNCIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.eyJpc193aGl0ZWxpc3QiOmZhbHNlLCJwcm9qZWN0X2lkIjoiY29tLmNvbTJ1cy5oaXZlc2RrIiwiZ3JhbnRfdHlwZSI6InVzZXIiLCJ1c2VyX2lkIjoyMDAwMDAxODU1MiwidG9rZW5fdHlwZSI6InJlZnJlc2hfdG9rZW4iLCJleHAiOjE3NDgxNTAzODMsImlhdCI6MTc0NTU1ODM4MywiYXV0aF92ZXIiOiJ2NCJ9.fvXTfRDYhlk21EY-ngAXbQMgYM9f-rFYPBa_GMV3JDz3cy9wwGfPTnF-VO0WkpxzpPdbG1ZX0HAdIkT4kF873ee2d-g6-JeuIEy0SFcTMpdYWXnlOfsuZlFIkzCm0OB_mlnNo_wxXHvjHM_dFDF-SfK2r9_ga8yLOXDfLJeA4XUYGwwsG3XT9x5Vy8RlUcF2aeuf-2bXdLSD2NGssZh18RTayV2CNtGuX0kj-nABVVTzLWUqbwKSrIVXjlS76zxl3SisUW_pz97iM98yLLRdpe_56_VDPzKEqVmn4bCyhhlAT1LEdu_uudlBY7hSUX0cJzcLAtj_4GReuLU9SnvQpw"
}

Response Body

Field Name Type Description Remarks
code Integer Web Login Response Code
access_token String Access Token Validity: 1 hour
refresh_token String Refresh Token Validity: 30 days

Web Login Response Code

code Description Remarks
100 Success
1050 Invalid parameter
2011 No project information
2013 Project is in a terminated state
7001 No OAuth2.0 Client ID value Check in Hive console App Center > Security Key Settings
7002 OAuth2.0 Client information mismatch 〃
7003 No OAuth2.0 Client information 〃
7004 OAuth2.0 unsupported token issuance type Check the grant_type in the Request Body
8001 Failed to create OAuth2.0 JWT
8002 Failed to validate OAuth2.0 JWT
8004 OAuth2.0 unsupported algorithm for JWT
8005 Failed to validate OAuth2.0 JWT Kid
8006 Failed to validate OAuth2.0 JWT Signature
8007 Abnormal Payload in OAuth2.0 JWT
8008 OAuth2.0 unsupported token type Only refresh_token in the Payload can be renewed
8009 OAuth2.0 unsupported token scope
8011 OAuth2.0 JWT expired

Response Body Sample (Success)

This is an example of the response data returned when the following conditions are met.

  • The token has been successfully issued.
{
  "code": 100,
  "access_token": "eyJraWQiOiIwYThlMThkOS1hNmZiLTM3ZDMtNjkwYy02Zjg1ZTllNCIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.eyJpc193aGl0ZWxpc3QiOmZhbHNlLCJwcm9qZWN0X2lkIjoiY29tLmNvbTJ1cy5oaXZlc2RrIiwiZ3JhbnRfdHlwZSI6InVzZXIiLCJ1c2VyX2lkIjoyMDAwMDAxODU1MiwidG9rZW5fdHlwZSI6ImFjY2Vzc190b2tlbiIsImV4cCI6MTc0NTU2MTk4MywiaWF0IjoxNzQ1NTU4MzgzLCJhdXRoX3ZlciI6InY0In0.e4mCIirRpAni4A1ZEF3FDOFng3Da8hq6IqZmyyRQZsc7W3LfFi_id5TIQSDbvmagmT4GcwHztovpoYZxf8blwqES1lJmEVXsBBJ3qpEOAem0K9aVwY0zmOO3A0Eeh6Y0APABewNCpHiKPCMZwxSsMaUE56FfuYgnbhpsipR638VgyPniRVU-Bzcu0Pi2zo-5yUKbg2FCXex510fvZRxqGZPg8Rfhm-jXqAYuwALLIFf2ZykOWqVRFtczfPXwB6fLQrQvQeBnOYcHHnR1q8Fi-Rk_bQPsAffIemGvaC4vUeyx6Szzt_Gok1BsuF76lYZ5ogCn4lAlZ0SJLrgMM2-DNQ",
  "refresh_token": "eyJraWQiOiIwYThlMThkOS1hNmZiLTM3ZDMtNjkwYy02Zjg1ZTllNCIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.eyJpc193aGl0ZWxpc3QiOmZhbHNlLCJwcm9qZWN0X2lkIjoiY29tLmNvbTJ1cy5oaXZlc2RrIiwiZ3JhbnRfdHlwZSI6InVzZXIiLCJ1c2VyX2lkIjoyMDAwMDAxODU1MiwidG9rZW5fdHlwZSI6InJlZnJlc2hfdG9rZW4iLCJleHAiOjE3NDgxNTAzODMsImlhdCI6MTc0NTU1ODM4MywiYXV0aF92ZXIiOiJ2NCJ9.fvXTfRDYhlk21EY-ngAXbQMgYM9f-rFYPBa_GMV3JDz3cy9wwGfPTnF-VO0WkpxzpPdbG1ZX0HAdIkT4kF873ee2d-g6-JeuIEy0SFcTMpdYWXnlOfsuZlFIkzCm0OB_mlnNo_wxXHvjHM_dFDF-SfK2r9_ga8yLOXDfLJeA4XUYGwwsG3XT9x5Vy8RlUcF2aeuf-2bXdLSD2NGssZh18RTayV2CNtGuX0kj-nABVVTzLWUqbwKSrIVXjlS76zxl3SisUW_pz97iM98yLLRdpe_56_VDPzKEqVmn4bCyhhlAT1LEdu_uudlBY7hSUX0cJzcLAtj_4GReuLU9SnvQpw"
}

Response Body Sample (Failure)

This is an example of response data returned when the following conditions are met.

  • Token issuance failed.
{
  "code": 1050
}