Authentication

Refresh Token

Refresh access token using refresh token.

Resolves the refresh token in priority order:

  1. HttpOnly aimrank_refresh cookie (browser sessions — the normal case)
  2. Request body refresh_token (programmatic clients sending JSON)
  3. Query string refresh_token (legacy)

Returns 401 if none of these produce a valid token — callers should treat that as "session is gone, redirect to /login".

post/api/v1/auth/refresh

Request

  • Base URL: https://app.aimrank.io (the document declares no server; this is the origin it was published from)
  • URL: https://app.aimrank.io/api/v1/auth/refresh
  • Auth: none declared

Request body

refresh_tokenstring nullable

Response

Successful Response

access_tokenstring required
refresh_tokenstring required
token_typestring
requires_2faboolean

Changes

No recorded changes to this operation across all 1 revision of this API.