Rotate refresh token
POST/v1/auth/refresh
Exchanges a valid refresh token for a new access token and refresh token. Use this before the access token expires to keep the session alive. Reusing the same refresh token twice (replay) revokes the whole token family and returns 401.
Request
Responses
- 200
- 401
New token pair
Invalid or replayed token