---
title: "Exchange a refresh token for a session, optionally acting for an account"
method: POST
path: "/auth/refresh"
tags: ["auth"]
---

# Exchange a refresh token for a session, optionally acting for an account

`POST /auth/refresh`

## Request

- The document declares no server URL.
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/hevn-inc/apis/hevn-api/docs/auth/refresh/post.ts> (a function with typed inputs; its response is checked against the schema)

Exchange a device-bound refresh token for a new short-lived access token. `userId` may select an account the authenticated actor is currently authorized to access.

## Headers

- `user-agent` string, nullable

## Request body

- RefreshRequest
  - `userId` string, nullable: Account to act for; omit it to continue acting as the authenticated account.

## Response `200`

Successful Response

- SessionResponse
  - `accessToken` string, required: Short-lived bearer token used to authorize API requests.
  - `expiresIn` integer, required: Number of seconds until the access token expires.
  - `userId` string, required: Account selected for the issued session.

## Other responses

- `422`: Request validation failed

## Changes

- **2026-11-12** `299a3aa6f521`: 1 warning, 2 info
  - added the new `verification_not_applicable` enum value to the `error/code` response property for the response status `422`
  - removed the `phone_required` enum value from the `error/code` response property for the response status `422`
  - removed the `rail_requirements_unmet` enum value from the `error/code` response property for the response status `422`
- **2026-10-23** `a02795de2d2b`: 9 warning, 5 info
  - deleted the `header` request parameter `x-api-key`
  - added the new `client_already_linked` enum value to the `error/code` response property for the response status `422`
  - added the new `kyb_documents_processing` enum value to the `error/code` response property for the response status `422`
  - added the new `link_code_expired` enum value to the `error/code` response property for the response status `422`
  - …10 more
- **2026-10-20** `19eb00e9f258`: 1 info
  - removed the `phone_in_use` enum value from the `error/code` response property for the response status `422`
- **2026-10-20** `bd6c9d69540e`: 1 warning
  - added the new `phone_in_use` enum value to the `error/code` response property for the response status `422`
- **2026-10-20** `19eb00e9f258`: 1 info
  - removed the `document_fields_missing` enum value from the `error/code` response property for the response status `422`

[Operation history](https://skmtc.dev/hevn-inc/apis/hevn-api/changes/auth/refresh/post.md)

---

[API](https://skmtc.dev/hevn-inc/apis/hevn-api.md) - [All operations](https://skmtc.dev/hevn-inc/apis/hevn-api/llms.txt) - [OpenAPI document](https://skmtc.dev/hevn-inc/apis/hevn-api/revisions/299a3aa6f521?raw)