Auth

Refresh access token

Rotate the refresh token and issue a new access token. The old refresh token is invalidated (single-use rotation).

post/v1/auth/refresh

Request

  • Base URL: http://localhost:4000
  • URL: http://localhost:4000/v1/auth/refresh
  • Auth: none declared

Request body

refreshTokenstring required

Response

New tokens

accessTokenstring

JWT access token (15min expiry)

refreshTokenstring nullable

Refresh token (30 day expiry, single-use). Null when resuming an existing device session — keep the stored token.

expiresIninteger

Access token TTL in seconds

tokenTypestring

Example response

{
  "expiresIn": 900,
  "tokenType": "Bearer"
}

Changes

No recorded changes to this operation across all 2 revisions of this API.