Skip to main content
Public endpoint. Uses the refresh_token cookie to issue a new BEARER cookie and a new refresh_token cookie. No body.
The refresh token is single use. Always store the new refresh_token cookie from the response: the old one stops working.

Response

200: new cookies are set. The body does not contain the tokens.

Errors

If several requests fail with 401 at the same time, refresh once and retry them all after it completes. Two parallel refresh calls would use the same single-use token and the second would fail.