---
title: "Refresh an access token"
method: POST
path: "/api/cis/v1/auth/refresh"
tags: ["Auth"]
---

# Refresh an access token

`POST /api/cis/v1/auth/refresh`

## Headers

- `x-tenant-id` string, required

## Request body

- object
  - `refreshToken` string, required

## Response `200`

Token refreshed

- SessionResponse
  - `sessionId` string, uuid
  - `accessToken` string — JWT (HS256 or ES256)
  - `expiresIn` integer — Token TTL in seconds
  - `refreshToken` string
  - `mfaRequired` boolean — True if MFA step is needed before full access

## Other responses

- `401` — Invalid or expired refresh token
- `403` — Identity blocked or frozen

---

[API](https://skmtc.net/stalela/apis/stalela-cis-customer-identity-service-api.md) · [All operations](https://skmtc.net/stalela/apis/stalela-cis-customer-identity-service-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/stalela/stalela-cis-customer-identity-service-api/revisions/3065faad0b6b/schema)