Publisher Rotate Access Token

Self-serve token rotation. Authenticates with the CURRENT token via the existing publisher header, then mints a fresh 64-hex token and persists access_token_minted_at. The old token is invalidated the moment this commits. Rate-limited at 1/minute + 5/hour per IP so a compromised token can't be brute-rolled.

post/v1/publisher/{tenant_slug}/access-token/rotate

Request

  • Base URL: https://api.storyflo.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.storyflo.com/v1/publisher/{tenant_slug}/access-token/rotate
  • Auth: none declared

Path parameters

tenant_slugstring required

Headers

x-storyflo-publisher-tokenstring nullable

Response

Successful Response

object required

Changes

No recorded changes to this operation across all 1 revision of this API.