The “access_token” should be stored for all additional requests. The “refresh_token” value is used when using the “Refresh Token” endpoint to request a new token without requiring the user to log back in. This request must be done before the token has expired in 60 days.

Example cURL:

curl --location --request POST 'https://app.opendate.io/oauth/token'
--header 'Content-Type: application/json'
--data-raw '{
"grant_type": "password",
"email": "Johnsmith@opendate.io",
"password": "...",
"client_id": "xxxxxxxxxxxxxxxxxxxx",
"client_secret": "xxxxxxxxxxxxxxxxxxxx"
}'

Example Response:

{
"access_token": "xxxxxxxxxxxxxxxxxxxx",
"token_type": "Bearer",
"expires_in": 5184000,
"refresh_token": "xxxxxxxxxxxxxxxxxxxx",
"created_at": 1629826546
}