Refresh tokens
POST/api/auth/refresh
Exchanges a refresh token for a new access token and a new refresh token. The previous refresh token is invalidated. Replay detection revokes all sessions for the user.
Request
Responses
- 200
- 400
- 401
- 429
OK
Invalid body (Zod)
invalid_api_key or invalid_refresh_token
Too many requests