---
title: "Refresh"
method: POST
path: "/api/v1/auth/refresh"
---

# Refresh

`POST /api/v1/auth/refresh`

## Request

- Base URL: `https://trovastorage.it` (the document declares no server; this is the origin it was published from)
- URL: `https://trovastorage.it/api/v1/auth/refresh`
- Auth: none declared

A new pair of tokens for a refresh token that is still good, which is
then spent. The token comes in the body, from a caller that holds it, or
as the browser's cookie (M10): then the request must carry the CSRF value,
like every request that acts with a cookie.

## Request body

- RefreshRequest
  - `refresh` string, nullable

## Response `200`

Successful Response

- TokenResponse
  - `access` string, required
  - `refresh` string, required
  - `token_type` string

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/trovastorage/apis/stock-your-inventory.md) · [All operations](https://skmtc.dev/trovastorage/apis/stock-your-inventory/llms.txt) · [OpenAPI document](https://skmtc.dev/trovastorage/apis/stock-your-inventory/revisions/c75f591a585c?raw)