Refresh a browser session

Exchange a resume token for a fresh session pass. Call this from YOUR server when the browser reports its pass is about to expire — you decide whether the visitor is still entitled to the session. The resume token is never rotated: keep using the one POST /v1/sessions returned until it expires, then create a new session.

post/v1/sessions/refresh

Request

  • Base URL
    https://api.runbear.io
  • Auth
    HTTP bearer

Request body

resumeTokenstring required

The resumeToken.token returned by POST /v1/sessions. Required — a missing or empty value is a 400 from the validator, never a silent new session.

endUserstring

Required when the session was minted with endUser; must be byte-identical to that value. Omitted otherwise.

Response

Default Response

Example response

{
  "pass": {
    "expiresInSeconds": 900
  },
  "resumeToken": {
    "expiresInSeconds": 900
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.