---
title: "Refresh an access token"
method: POST
path: "/auth/refresh"
tags: ["Auth"]
---

# Refresh an access token

`POST /auth/refresh`

## Request

- Base URL: `https://api.shopseen.com/v1`
- URL: `https://api.shopseen.com/v1/auth/refresh`
- Auth: none declared

## Request body

- object
  - `refresh_token` string, required
  - `rotation_nonce` string: Persisted random base64url retry secret; reuse only for the same unacknowledged refresh attempt

## Response `200`

New access token

- object
  - `access_token` string
  - `refresh_token` string: Rotated credential; persist before the next renewal

## Other responses

- `401`: Invalid, inactive, revoked, idle-expired or reused session
- `409`: An acknowledged refresh attempt has already been superseded

---

[API](https://skmtc.dev/shopseen/apis/a-side-api.md) - [All operations](https://skmtc.dev/shopseen/apis/a-side-api/llms.txt) - [OpenAPI document](https://skmtc.dev/shopseen/apis/a-side-api/revisions/f37f989e90da?raw)