Deprecated compatibility endpoint. Prefer the OAuth2 token endpoint with grant_type=refresh_token.

OAuth token requests should be sent as application/x-www-form-urlencoded, as specified by OAuth 2.0. JSON requests remain accepted for backwards compatibility.

Request new access and refresh tokens. Upon requesting new tokens, both old access_token and refresh_token values will be invalidated - make sure you update the refresh_token in your database every time you call this endpoint.
New refresh tokens should be requested at least once every 30 days (daily or weekly is fine) in order to keep the connection alive.
If you receive a 401 or 403 response, delete the old refresh token and disconnect the user.