Token Refresh

You can refresh an authorization code token issued by the Access Token request. This is used to extend the life of the Access Token in order to prevent the InsureSign user from needing to provide their credentials again.

URL

POST https://sign-auth.insuresign.io/oauth2/token

Headers

NameValueDescription
Content-Typeapplication/x-www-form-urlencoded
AuthorizationInsureSign Integration credentials.Base64 encoded string of client_id:client_secret

Request Fields

PathTypeOptionalDescription
grant_typeStringfalseValue of refresh_token as required by the OAuth2 standard for token exchange.
client_idStringfalseYour InsureSign issued integration client_id.
refresh_tokenStringfalseThe refresh_token issued during the Authorization Code / Access Token Exchange request.

Response Fields

PathTypeDescription
access_tokenStringThe OAuth access token issued by the token exchange request. This will be used as Authorization credentials on all subsequent InsureSign API calls.
expires_inLongTime in seconds that the issued access token will be valid.
token_typeStringDefines the type of access token that was granted by the token exchange.

Example Request

$ curl 'https://sign-auth.insuresign.io/oauth2/token' -i -X POST \
    -H 'Authorization: Basic YourEncodedClientIdAndSecret' \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -d 'grant_type=refresh_token&client_id=myclientid&refresh_token=yourRefreshToken'

Example Response

HTTP/1.1 200 OK
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Expires: 0
X-Frame-Options: DENY
Content-Length: 625
X-Content-Type-Options: nosniff
Content-Type: application/json;charset=UTF-8
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Cache-Control: no-cache, no-store, max-age=0, must-revalidate

{
  "access_token": "your access token",
  "expires_in": 3600,
  "token_type": "Bearer"
}

📘

Legacy API Endpoint

For any API Credentials issued prior to January 15th, 2021, use the following url:
https://auth.insuresign.io/