/v1/auth/refresh

POST

/v1/auth/refresh

curl --request POST \
  --url http://localhost:8787/v1/auth/refresh

• Local development (`wrangler dev --env dev`).
• Staging — placeholder host; real custom domain not yet provisioned.
• Production — placeholder host; real custom domain not yet provisioned.

Responses

200

New access + refresh cookies issued; old refresh token invalidated.

Media typeapplication/json

object

accessTokenExpiresAt

required

string

Example^generated

{
  "accessTokenExpiresAt": "example"
}

401

Missing/invalid/expired refresh token, OR reuse of an already-rotated token — the family is revoked either way and the caller must treat this as a full logout.

Media typeapplication/problem+json

object

code

required

string

Allowed values: missing_refresh_token invalid_refresh_token reuse_detected

detail

required

string

status

required

number

title

required

string

type

required

string

Example

{
  "code": "missing_refresh_token"
}