---
title: "Refresh access token"
method: POST
path: "/auth/refresh-access-token"
tags: ["Auth"]
---

# Refresh access token

`POST /auth/refresh-access-token`

Uses the refresh token cookie to issue a new access token.

## Response `200`

New access token issued

- AuthTokenResponse
  - `user` User
    - `_id` string — MongoDB ObjectId
    - `name` object
      - `firstName` string
      - `lastName` string
    - `email` string, email
    - `accessLevel` 'user' | 'admin' | 'superadmin'
    - `role` string
    - `createdDate` string, date-time
    - `currentRole` string
    - `desiredRole` string
    - `newMember` boolean
    - `currentJobTitle` string
    - `desiredJobTitle` string
    - `skillsToMatch` string[]
    - `firstAttended` string
    - `attendanceReason` string
    - `projects` string[]
    - `githubHandle` string
    - `phone` string
    - `textingOk` boolean
    - `slackName` string
    - `isHflaGithubMember` boolean
    - `githubPublic2FA` boolean
    - `availability` string
    - `managedProjects` string[]
    - `isActive` boolean
  - `expiresAt` string, date-time

## Other responses

- `401` — Invalid or expired refresh token

---

[API](https://skmtc.dev/hackforla/apis/vrms-api.md) · [All operations](https://skmtc.dev/hackforla/apis/vrms-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hackforla/vrms-api/revisions/092c34cc0e58/schema)