Refresh
const url = 'https://example.com/auth/refresh/';const options = { method: 'POST', headers: {'Content-Type': 'application/json'}, body: '{"refresh_token":"example"}'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request POST \ --url https://example.com/auth/refresh/ \ --header 'Content-Type: application/json' \ --data '{ "refresh_token": "example" }'Exchange a valid refresh token for a new access + refresh token pair.
Multi-tenant clients must call this endpoint on their tenant host. Refresh
tokens are opaque and carry no bearer tid claim, so tenant middleware
binds the database transaction from that same-origin host before the user
row is resolved and the next tenant-bound access token is minted.
Request Body required
Section titled “Request Body required ”object
Example generated
{ "refresh_token": "example"}Responses
Section titled “ Responses ”Successful Response
object
JWT access token for Authorization header
Seconds until the access token expires
Opaque token used to obtain a new access token
Example
{ "token_type": "bearer"}Bad request — invalid query parameters or payload
Unauthorized — missing or invalid credentials
Forbidden — caller lacks access to this resource
Not found
Validation error
Too many requests — retry after the advertised interval
Headers
Section titled “Headers ”Seconds until the request may be retried
Internal server error
Service unavailable — the database could not serve the request