Auth
Rotate the access token using the refresh-token cookie
Reads the refresh_token httpOnly cookie, rotates it, and issues a new short-lived JWT access-token cookie. A replayed (already-consumed) refresh token revokes the entire token family (theft detection).
post/auth/refresh
Request
- Base URL: http://localhost:38200
- URL: http://localhost:38200/auth/refresh
- Auth: none required
Response
New JWT + refresh cookies set.
Changes
No recorded changes to this operation across all 1 revision of this API.