API security
Refresh Token
A refresh token is a token used by an authorized client to obtain a new access token without replaying the full end-user interaction.
Definition
A refresh token is a renewal artifact issued by the authorization server to a trusted client so that new access tokens can be requested when the current one expires. It separates session continuity from the exposure of the main access token.
The Ariovis perspective
Tokens are part of an access architecture, not a substitute for identity governance or authorization. Their scope, lifetime, validation and revocation must match the risk of the API and user journey.
Related services
Related terms
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.