---
title: "Renew Session"
method: POST
path: "/auth/renew"
tags: ["auth"]
---

# Renew Session

`POST /auth/renew`

## Request

- Base URL: `https://api.tickertrac.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.tickertrac.com/auth/renew`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`

Swap a signed-in session for a fresh one, so an app in regular use stays signed in.

A session still ends seven days after its last renewal, and a password change still
ends it: get_current_user has already refused a token issued before that change. An
Apple session keeps its revocable session binding. Only a bearer session renews; an
API key is a different credential and is never exchanged for a session token.

Renewal also stops SESSION_MAX_AGE_DAYS after the sign-in that started the chain, so
a token taken once cannot be kept alive indefinitely by renewing it; the person signs
in again. A token from before the stamp existed is dated from its own issue.

## Response `200`

Successful Response

- TokenResponse
  - `access_token` string, required
  - `token_type` string
  - `api_key` string, nullable

---

[API](https://skmtc.dev/tickertrac/apis/tickerrag-api.md) · [All operations](https://skmtc.dev/tickertrac/apis/tickerrag-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tickertrac/apis/tickerrag-api/revisions/3c7eb0f6425d?raw)