Skip to main content
POST
Refresh Token
Refreshes an expired access token using a valid refresh token. This endpoint allows users to maintain their session without requiring them to log in again.

Authentication

No authentication required (uses refresh token in request body).

Request Body

string
required
Valid refresh token obtained from the login endpoint.

Response

string
New JWT access token for authenticating API requests. Include this in the Authorization header as Bearer {accessToken}.

Example Request

Example Response

Error Responses

string
Error type identifier.
string
Human-readable error message.

Common Errors

401 Unauthorized
400 Bad Request

Notes

  • Access tokens typically expire after 1 hour
  • Refresh tokens typically expire after 7 days
  • When a refresh token expires, the user must log in again
  • Store refresh tokens securely and never expose them in client-side code