> ## Documentation Index
> Fetch the complete documentation index at: https://tickblaze.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Refresh access token

> Rotates a refresh token and returns a new firm-bound session access token. Rotation is bound to the submitted refresh token's Prop Firm and does not require callers to use that firm's request host.



## OpenAPI

````yaml /openapi.json post /auth/refresh/
openapi: 3.0.3
info:
  title: TBBO API
  version: 1.0.0
  description: >
    Authentication uses short-lived session tokens (3 hours).


    Send the token with every request using the `Authorization` header:


    ```

    Authorization: Token <token>

    ```


    Example:


    ```

    Authorization: Token 123abc456def789

    ```


    To obtain a token, call `POST /auth/login/` with valid credentials. The
    response includes a `key` value. Use that value in the header above for
    subsequent API calls.


    How to find required IDs:


    - `challenge_id`: Prop Tech Configuration -> Challenges

    - `user_id`: Tickblaze Manager -> Users

    - `account_id`: Tickblaze Manager -> Accounts 
servers: []
security: []
tags:
  - name: withdrawals
    description: Withdrawal related endpoints
    x-displayName: Withdrawals
paths:
  /auth/refresh/:
    post:
      tags:
        - Auth
      summary: Refresh access token
      description: >-
        Rotates a refresh token and returns a new firm-bound session access
        token. Rotation is bound to the submitted refresh token's Prop Firm and
        does not require callers to use that firm's request host.
      operationId: auth_refresh_create
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RefreshTokenRequest'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/RefreshTokenRequest'
          multipart/form-data:
            schema:
              $ref: '#/components/schemas/RefreshTokenRequest'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RefreshTokenResponse'
          description: ''
      security:
        - {}
components:
  schemas:
    RefreshTokenRequest:
      type: object
      properties:
        refresh_token:
          type: string
          description: Refresh token to obtain a new access token
      required:
        - refresh_token
    RefreshTokenResponse:
      type: object
      properties:
        token:
          type: string
        prop_firms:
          type: array
          items:
            type: string
          description: All active Prop Firm slugs the authenticated user belongs to.
        expires_at:
          type: string
          format: date-time
        refresh_token:
          type: string
        refresh_expires_at:
          type: string
          format: date-time
      required:
        - expires_at
        - refresh_expires_at
        - refresh_token
        - token

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.