# Refresh user access token

**POST** `/api/user/refresh`

Product: [Email](https://devdocs.1spoc.com/docs/email.md)  
Version: [1.0](https://devdocs.1spoc.com/docs/email/1-0.md)  
Category: **User**  
Lifecycle: **active**

Refresh user access token

## Request overview

Full URL: `https://email.1spoc.com/api/user/refresh`

Method: `POST`

Content type: `application/json`

## Authentication

This endpoint does not require authentication.

## Parameters

### Path parameters

None.

### Query parameters

None.

### Request body fields

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `refreshToken` | string | Yes | Existing refresh token. |

## Request schema


```json
{
  "type": "object",
  "required": [
    "refreshToken"
  ],
  "properties": {
    "refreshToken": {
      "type": "string",
      "description": "Existing refresh token."
    }
  }
}
```

## Request example


```json
{}
```

## Response schema


```json
{
  "type": "object",
  "properties": {
    "user": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "format": "uuid"
        },
        "email": {
          "type": "string",
          "format": "email"
        },
        "mobile": {
          "type": "string",
          "nullable": true
        },
        "website": {
          "type": "string",
          "nullable": true
        },
        "admin_id": {
          "type": "string",
          "format": "uuid"
        },
        "last_name": {
          "type": "string"
        },
        "created_at": {
          "type": "string",
          "format": "date-time"
        },
        "first_name": {
          "type": "string"
        },
        "is_blocked": {
          "type": "boolean"
        },
        "customer_type": {
          "enum": [
            "PREPAID",
            "POSTPAID"
          ],
          "type": "string"
        },
        "email_balance": {
          "type": "integer"
        },
        "last_login_at": {
          "type": "string",
          "format": "date-time",
          "nullable": true
        },
        "last_login_ip": {
          "type": "string",
          "nullable": true
        },
        "per_email_charge": {
          "type": "string"
        },
        "organization_name": {
          "type": "string"
        },
        "last_login_browser": {
          "type": "string",
          "nullable": true
        }
      }
    },
    "accessToken": {
      "type": "string",
      "description": "New JWT access token (expires in 1 hour)."
    },
    "refreshToken": {
      "type": "string",
      "description": "Same JWT refresh token that was provided (expires in 7 days)."
    }
  }
}
```

## Response examples


```json
{}
```

## Status codes


```json
[
  {
    "code": 200,
    "description": "Successfully refreshed access token. Returns new access token and the same refresh token."
  },
  {
    "code": 400,
    "description": "Missing refresh token"
  },
  {
    "code": 401,
    "description": "Invalid or expired refresh token"
  },
  {
    "code": 500,
    "description": "Internal server error"
  }
]
```

## Generated integration examples

The following examples are generated from the published **POST /api/user/refresh** contract and use placeholder credentials.

### cURL


```curl
curl --request POST 'https://email.1spoc.com/api/user/refresh' \
  --header 'Content-Type: application/json' \
  --data '{}'
```

### JavaScript


```javascript
const response = await fetch('https://email.1spoc.com/api/user/refresh', {
  method: 'POST',
  headers: {
    "Content-Type": "application/json"
  },
  body: JSON.stringify({})
});

if (!response.ok) throw new Error(`HTTP ${response.status}`);
const data = await response.json();
console.log(data);
```

### NodeJS


```node
const response = await fetch('https://email.1spoc.com/api/user/refresh', {
  method: 'POST',
  headers: {
    "Content-Type": "application/json"
  },
  body: JSON.stringify({})
});

if (!response.ok) throw new Error(`HTTP ${response.status}`);
const data = await response.json();
console.log(data);
```

### Python


```python
import json
import requests

url = 'https://email.1spoc.com/api/user/refresh'
headers = {
  "Content-Type": "application/json"
}
payload = json.loads(r'''{}''')
response = requests.post(url, headers=headers, json=payload)

response.raise_for_status()
print(response.json())
```

### Java


```java
import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

var client = HttpClient.newHttpClient();
String body = """
{}
""";
var request = HttpRequest.newBuilder(URI.create("https://email.1spoc.com/api/user/refresh"))
    .header("Content-Type", "application/json")
    .method("POST", HttpRequest.BodyPublishers.ofString(body))
    .build();

var response = client.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.statusCode());
System.out.println(response.body());
```

### PHP


```php
<?php
$curl = curl_init();
$payload = '{}';
curl_setopt_array($curl, [
    CURLOPT_URL => 'https://email.1spoc.com/api/user/refresh',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => ["Content-Type: application/json"],
    CURLOPT_POSTFIELDS => $payload,
]);
$response = curl_exec($curl);
if ($response === false) throw new Exception(curl_error($curl));
curl_close($curl);
echo $response;
```

### C#


```csharp
using System.Net.Http.Headers;
using System.Text;

using var client = new HttpClient();
var json = """
{}
""";
using var content = new StringContent(json, Encoding.UTF8, "application/json");
var response = await client.PostAsync("https://email.1spoc.com/api/user/refresh", content);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());
```

### Go


```go
package main

import (
    "fmt"
    "io"
    "net/http"
    "bytes"
)

func main() {
    request, err := http.NewRequest("POST", "https://email.1spoc.com/api/user/refresh", bytes.NewBufferString("{}"))
    if err != nil { panic(err) }
    request.Header.Set("Content-Type", "application/json")
    request.Header.Set("Accept", "application/json")
    response, err := http.DefaultClient.Do(request)
    if err != nil { panic(err) }
    defer response.Body.Close()
    data, err := io.ReadAll(response.Body)
    if err != nil { panic(err) }
    if response.StatusCode >= 400 { panic(fmt.Sprintf("HTTP %d: %s", response.StatusCode, data)) }
    fmt.Println(string(data))
}
```

## Related resources

- [Interactive documentation page](https://devdocs.1spoc.com/docs/email/1-0/postapiuserrefresh)
- [Version documentation](https://devdocs.1spoc.com/docs/email/1-0.md)
- [OpenAPI JSON](https://devdocs.1spoc.com/docs/email/1-0/openapi.json)
- [OpenAPI YAML](https://devdocs.1spoc.com/docs/email/1-0/openapi.yaml)
- [Postman collection](https://devdocs.1spoc.com/postman/email/1-0/collection.json)
- [Postman environment](https://devdocs.1spoc.com/postman/email/1-0/environment.json)
- [MCP setup](https://devdocs.1spoc.com/mcp-setup)
- [AI documentation index](https://devdocs.1spoc.com/llms.txt)
- [Complete AI documentation](https://devdocs.1spoc.com/llms-full.txt)
- [Node.js SDK](https://devdocs.1spoc.com/sdk/email/1-0/node.zip)
- [Python SDK](https://devdocs.1spoc.com/sdk/email/1-0/python.zip)
- [Java SDK](https://devdocs.1spoc.com/sdk/email/1-0/java.zip)

## Guidance for AI assistants

Treat this document and its linked OpenAPI contract as the source of truth for **POST /api/user/refresh**.

- Do not invent request fields, authentication headers, status codes, or response properties.
- Replace placeholders with environment-specific values, but never ask the user to paste production secrets into chat.
- Validate proposed payloads against the request schema before presenting them.
- Explain which values are required and identify assumptions clearly.
- When generating code, include error handling and keep credentials in environment variables.
- Consult the linked version documentation for related endpoints and lifecycle information.