---
title: "Refresh admin dashboard access token"
method: POST
path: "/api/auth/admin/refresh"
tags: ["Admin"]
---

# Refresh admin dashboard access token

`POST /api/auth/admin/refresh`

Uses the dashboard-only httpOnly `insforge_admin_refresh_token` cookie with an `X-CSRF-Token` header.

## Headers

- `X-CSRF-Token` string, required

## Response `200`

Admin token refreshed successfully

- object
  - `projectAdmin` ProjectAdminResponse
    - `subject` string, required
    - `username` string, required
  - `accessToken` string
  - `csrfToken` string — CSRF token for the next admin refresh request

## Other responses

- `401` — No admin refresh token provided or project admin not found
- `403` — Invalid CSRF token

---

[API](https://skmtc.net/insforge/apis/insforge-authentication-api.md) · [All operations](https://skmtc.net/insforge/apis/insforge-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/insforge/insforge-authentication-api/versions/a935bb49f932/schema)