Skip to main content
POST
Issue a new access token using a valid refresh token. Implements token rotation for security.

Request

string
required
Valid refresh token from login

Response

boolean
Whether the refresh succeeded
string
New JWT access token
string
New refresh token (old one is revoked)
integer
Access token expiration timestamp
integer
Refresh token expiration timestamp
object
User details object

Examples


Token Rotation

For security, a new refresh token is issued on every refresh:
  1. Old refresh token is revoked immediately
  2. New refresh token is stored
  3. Both new tokens are returned

Errors

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

Refresh token

refresh_token
string
required

Response

OK

expires_at
integer
refresh_expires_at
integer
refresh_token
string
success
boolean
token
string
user
object