Exchange a refresh token
POST
/api/v1/auth/refresh
Issues a new session token from a refresh token. Only available when the original login asked for one.
An expired refresh token and an unknown one answer identically, on purpose. A revoked session is the one case that is distinguished, because the remedy differs: sign in again rather than retry.
نظرة سريعة
- المصادقة
- عام
- حد المعدل
refresh
المعاملات
| المعامل | الوصف |
|---|---|
refresh_tokenمطلوب
body · string
|
The refresh token returned by login. Shown once; only its hash is stored. |
الأخطاء
| الرمز | متى تُرجَع |
|---|---|
ERR_UNAUTHORIZED401
|
the session was signed out (session_revoked), or the token is unknown or expired (invalid_credentials) |