---
title: "Refresh access token via realtime state-change signal"
method: POST
path: "/auth/refresh-token"
tags: ["auth"]
---

# Refresh access token via realtime state-change signal

`POST /auth/refresh-token`

## Request

- Base URL: `https://api.thebridge.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://api.thebridge.dev/auth/refresh-token`
- Auth: none declared. Required headers: `authorization`

TBP-90 SDK flow. Re-fetches user/tenant state from mongo and issues a fresh JWT with current claims (role, plan, tokenVersion). Accepts the current access token in the Bearer header; expired tokens are accepted within a 5-minute grace window.

## Headers

- `authorization` string, required

## Response `200`

Fresh tokens issued

## Other responses

- `401`: Missing / invalid / too-stale Bearer token

---

[API](https://skmtc.dev/thebridge/apis/bridge-api.md) · [All operations](https://skmtc.dev/thebridge/apis/bridge-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thebridge/apis/bridge-api/revisions/290fffcb3d80?raw)