Authentication
Refresh Tokens
Refresh access and refresh tokens.
Validates the provided refresh token, issues new tokens, and invalidates the old refresh token (token rotation).
Flow:
- Validate refresh token (signature, expiration, type)
- Check if token is revoked in database
- Get user information from token claims
- Revoke old refresh token
- Generate new access token and refresh token
- Store new refresh token
- Return new tokens
POST
Refresh Tokens
Body
application/json
Request body for token refresh.
JWT refresh token
Minimum string length:
1Refresh Tokens