---
title: "Refresh the access token using the refresh cookie"
method: POST
path: "/api/v1/auth/refresh"
tags: ["Auth"]
---

# Refresh the access token using the refresh cookie

`POST /api/v1/auth/refresh`

## Request

- Base URL: `https://otprun.com`
- URL: `https://otprun.com/api/v1/auth/refresh`
- Auth: none declared

## Headers

- `User-Agent` string

## Response `200`

OK

- RefreshBody
  - `access_token` string, required
  - `expires_at` string, date-time, required
  - `token_type` 'Bearer', required
  - `user` AccountUserBody, required
    - `created_at` string, date-time, required
    - `email` string, nullable, required: Null for accounts created with a phone number
    - `email_verified` boolean, required: True once the email was confirmed with a code or a sign-in link
    - `has_password` boolean, required
    - `id` integer, required
    - `is_admin` boolean, required
    - `locale` string, required
    - `name` string, required: Empty until the person enters a name
    - `phone` string, nullable, required: E.164 number the account signs in with, null for email accounts
    - `public_id` string, uuid, required

## Other responses

- `401`: Unauthorized
- `422`: Unprocessable Entity
- `500`: Internal Server Error

---

[API](https://skmtc.dev/otprun/apis/otp-run-api.md) · [All operations](https://skmtc.dev/otprun/apis/otp-run-api/llms.txt) · [OpenAPI document](https://skmtc.dev/otprun/apis/otp-run-api/revisions/43d40d5f4050?raw)