Sign in

v1

latestOpenAPI 3.0.22026-07-26480119.6 KB
Authentication

Exchange a refresh token for a new token pair

Uses a valid refresh token to issue a new access token and refresh token pair. The old refresh token is invalidated after use. If token reuse is detected (the same refresh token used more than once), all active sessions are revoked.

post/api/v1/refresh

Request body

refresh_tokenstring required

Opaque refresh token obtained from login or a previous refresh

Response

Tokens refreshed successfully

access_tokenstring required

New short-lived JWT access token

refresh_tokenstring required

New opaque refresh token

token_typestring required
expires_ininteger required

Access token TTL in seconds

Example response

{
  "token_type": "Bearer",
  "expires_in": 86400
}