Refresh Token Endpoint

Refresh access token using a refresh token.

Accepts refresh token from httpOnly cookie (web/admin) or request body (iOS). Implements single-use rotation with theft detection via token families. Dropped-response recovery: if the replacement session was never used (auth_used=False), reissue in place instead of revoking the family (#1427).

post/api/auth/refresh

Request

  • Base URL: https://api.yourbeckett.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.yourbeckett.com/api/auth/refresh
  • Auth: none declared

Request body

refresh_tokenstring nullable

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.