Refresh session tokens

PUBLIC

Exchanges a valid refresh token for new access, ID, and refresh tokens. The submitted refresh token is immediately invalidated and replaced with a new one.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Either supply the refresh token in this body, OR send the refresh_token HttpOnly cookie that every session-mint endpoint now writes. The handler prefers the cookie when both are present. At least one source must carry the token — omitting both returns 400.

string

Refresh token issued during a previous authentication. Optional when the caller presents the refresh_token cookie set by POST /auth/link/verify, POST /session/token, or a prior call to this endpoint.

Headers
string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

Language
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
application/problem+json