Refreshing Access Tokens
Access tokens expire an hour after they are generated. To generate a new access token, use the refresh token you generated earlier.
Note:
You must use your domain-specific Zoho Accounts URL to refresh your access token.
For CN: https://accounts.zoho.com.cn/
Make a POST request with the following URL.
{Accounts_URL}/oauth/v2/token?refresh_token={refresh_token}&client_id={client_id}&client_secret={client_secret}&grant_type=refresh_token
If the request is successful, you will receive the following output:
{
"access_token": "{new_access_token}",
"expires_in": 3600,
"api_domain": "https://www.zohoapis.com/",
"token_type": "Bearer"
}
Notes:
- A user in an organization can have a maximum of 20 refresh tokens and each refresh token can have a maximum of 30 active access tokens (non-expired).
- If a user creates a 31st access token, the system will delete the first access token. Similarly, if the user creates a 21st refresh token, the system will delete the first refresh token.
- You can only generate a maximum of five refresh tokens in a minute.
- We have provided with a sample test OAuth in all the examples, so that you can test any example on your own. You can replace the sample OAuth Token with your actual token to test requests from your Zoho Recruit account
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
Still can't find what you're looking for?
Write to us: support@zohoforms.com
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
Zoho SalesIQ Resources
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Zoho DataPrep Resources
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Bigin?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
Related Articles
Generating Tokens
OAuth 2.0 requests are usually authenticated with an access token, which is passed as bearer token. To use this access token, you need to construct a normal HTTP request and include it in an authorization header along with the value of bearer. Note: ...Refreshing and deactivating the Sandbox
When your Sandbox setup is not in sync with the Production setup, any "test" that you conduct in your Sandbox will not be relevant when deployed to production. What worked in Sandbox may go wrong in your production setup as both versions would not be ...Revoking Tokens
If you want to revoke your refresh token: Make a POST request with the following URL {Accounts_URL}/oauth/v2/token/revoke?token={refresh_token} Note: You must use your domain-specific Zoho Accounts URL to revoke your refresh token.Overview
The Zoho Recruit API uses the OAuth 2.0 protocol for authentication. It uses the Authorization Code Grant Type to obtain the grant token (code). This grant type allows you to share specific data with any application while keeping your usernames and ...Authorization Request
To authorize your application, you need to redirect the user of the client application to the appropriate authorization endpoint. On a successful login, Zoho Recruit will call your redirect URI along with an authorization code. Note: You must make ...