---
title: "POST /api/v1/auth/refresh"
method: POST
path: "/api/v1/auth/refresh"
tags: ["AuthService"]
---

# POST /api/v1/auth/refresh

`POST /api/v1/auth/refresh`

RefreshToken exchanges a valid refresh token for a new access token.
 The refresh token is read from the HttpOnly cookie.
 Returns a new short-lived access token.

## Request body

- RefreshTokenRequest

## Response `200`

OK

- RefreshTokenResponse
  - `accessToken` string — The new short-lived access token.
  - `expiresAt` string, date-time — When the access token expires.

## Other responses

- `default` — Default error response

## Changes

- **2025-12-18** `5b13edddc39c` — 1 info
  - endpoint added
- **2025-12-15** `d740073f088f` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/usememos/apis/untitled-api/changes/api/v1/auth/refresh/post.md)

---

[API](https://skmtc.dev/usememos/apis/untitled-api.md) · [All operations](https://skmtc.dev/usememos/apis/untitled-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/usememos/untitled-api/revisions/a77a8e6d70bb/schema)