Skip to main content

September 9, 2026

· 2 min read

This release adds refresh token expiration information to all authentication endpoints. Clients can now see when refresh tokens will expire, enabling better session management and proactive token renewal before expiration.

  • POST /auth/password_login now returns refresh_token_expires_in to indicate when the refresh token will expire, allowing clients to plan token renewal in advance.
  • POST /auth/refresh_access_token now includes refresh_token_expires_in in the response, enabling clients to track the new refresh token's expiration time.
  • POST /providers/{id}/register_customer now provides refresh_token_expires_in in the credentials object, giving clients visibility into refresh token lifetime for newly registered customers.

POST /auth/password_login

  • added the required property oneOf[subschema #2: GetAccessTokenSuccess]/refresh_token_expires_in to the response with the 200 status (media type: application/json)
View updated docs

POST /auth/refresh_access_token

  • added the required property refresh_token_expires_in to the response with the 200 status (media type: application/json)
View updated docs

POST /providers/{id}/register_customer

  • added the required property credentials/refresh_token_expires_in to the response with the 200 status (media type: application/json)
View updated docs