Rotate refresh token

POST

/v1/auth/refresh

curl --request POST \
  --url https://kynectlocal-production.up.railway.app/v1/v1/auth/refresh \
  --header 'Content-Type: application/json' \
  --data '{ "refreshToken": "example" }'

• Authenticated API (v1)
• Public API (no auth required)

Issues a new access token and refresh token pair. The previous refresh token is immediately invalidated.

Request Body ^required

Media type application/json

object

refreshToken

required

Refresh token from prior login/refresh

string

Example ^generated

{
  "refreshToken": "example"
}

Responses

200

Success

Media type application/json

object

data

required

object

accessToken

required

JWT access token (RS256, 15 min expiry)

string

refreshToken

required

Opaque refresh token (single-use, 30 days)

string

Example ^generated

{
  "data": {
    "accessToken": "example",
    "refreshToken": "example"
  }
}

400

Validation error

Media type application/json

object

error

required

Error envelope

object

code

required

Machine-readable error code

string

message

required

Human-readable error description

string

details

Additional context, e.g. validation field errors

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

401

Unauthenticated

Media type application/json

object

error

required

Error envelope

object

code

required

Machine-readable error code

string

message

required

Human-readable error description

string

details

Additional context, e.g. validation field errors

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

403

Forbidden

Media type application/json

object

error

required

Error envelope

object

code

required

Machine-readable error code

string

message

required

Human-readable error description

string

details

Additional context, e.g. validation field errors

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

404

Not found

Media type application/json

object

error

required

Error envelope

object

code

required

Machine-readable error code

string

message

required

Human-readable error description

string

details

Additional context, e.g. validation field errors

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

422

Unprocessable

Media type application/json

object

error

required

Error envelope

object

code

required

Machine-readable error code

string

message

required

Human-readable error description

string

details

Additional context, e.g. validation field errors

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}