---
title: "Refresh Session"
method: POST
path: "/api/v1/auth/refresh"
tags: ["auth"]
---

# Refresh Session

`POST /api/v1/auth/refresh`

## Request

- Base URL: `https://api.badgeia.com`
- URL: `https://api.badgeia.com/api/v1/auth/refresh`
- Auth: none declared

Rotate the refresh cookie and issue a new access cookie.

The refresh cookie is set with ``Path=/api/v1/auth/refresh`` so it
only rides on this endpoint. On any failure (missing, expired,
revoked, or chain-replay) we clear both cookies and return 401. On
success we set new cookies and return ``{"ok": true}``.

The frontend wraps this around 401 responses on `/auth/me` to
transparently extend the session without a UI redirect.

## Response `200`

Successful Response

- object

---

[API](https://skmtc.dev/badgeia/apis/badge.md) · [All operations](https://skmtc.dev/badgeia/apis/badge/llms.txt) · [OpenAPI document](https://skmtc.dev/badgeia/apis/badge/revisions/7e7f7fee8b77?raw)