---
title: "POST /api/v1/auth/refresh"
method: POST
path: "/api/v1/auth/refresh"
tags: ["AuthService"]
---

# POST /api/v1/auth/refresh

`POST /api/v1/auth/refresh`

RefreshToken exchanges a valid refresh token for a new access token.
 The refresh token is read from the HttpOnly cookie.
 Returns a new short-lived access token.

## Request body

- RefreshTokenRequest

## Response `200`

OK

- RefreshTokenResponse
  - `accessToken` string — The new short-lived access token.
  - `expiresAt` string, date-time — When the access token expires.

## Other responses

- `default` — Default error response

## Changes

> 63 revisions in range; 51 could not be searched.

- **2025-12-15** `d740073f088f` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/usememos/apis/untitled-api/changes/api/v1/auth/refresh/post.md)

---

[API](https://skmtc.dev/usememos/apis/untitled-api.md) · [All operations](https://skmtc.dev/usememos/apis/untitled-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/usememos/untitled-api/revisions/9f2688df7c2e/schema)