Refresh Token
POST/api/v1/auth/refresh
Refresh the current JWT token. Requires a valid existing token.
The new token keeps the session's sign-in time, so a session renews only until
it is api.max_session_minutes old, and no token outlives that.
Responses
- 200
- 401
- 403
- default
Successful Response
The session is older than api.max_session_minutes (session_expired), has ended, or no account backs it
Refused: the session lacks the action this route checks, or its account must replace an issued password first. A SCIM route answers a refused action in the RFC 7644 error envelope
Problem details (RFC 9457)