Refresh access token

Get a new access token using a valid refresh token.

Usage:

• Pass the refresh token as a Bearer token in the Authorization header
• Returns a new access token and basic user information

Token Lifetimes:

• Access token: 24 hours (configurable via ACCESS_TOKEN_EXPIRY environment variable)
• Refresh token: 30 days (configurable via REFRESH_TOKEN_EXPIRY environment variable)

Best Practices:

• Call this endpoint before the access token expires
• Store the new access token and continue using it for authenticated requests
• If refresh fails with 401, redirect user to login flow