Refresh Tokens — POST /api/v1/auth/refresh

Refresh Tokens

Exchange a valid refresh token for a new access + refresh token pair (rotation). The old refresh token is not reusable after this call.

Endpoint: POST /api/v1/auth/refresh

Authentication: No access token or API key is needed.

Parameters

This endpoint takes no parameters.

Request body

Content type	Body	Required
application/json	RefreshRequest	yes

Responses

Status	Meaning	Body
200	Successful Response	TokenResponse (application/json)
422	Validation Error	HTTPValidationError (application/json)

Errors this endpoint returns, read from its source code:

• 401, with messages such as “Invalid or expired refresh token”, “Multi-factor authentication is now required for your role. Sign in again to enroll an authenticator”
• 503

Statuses not listed here are explained in Errors and retries.

More details

• Group: Authentication
• Operation ID: refresh_tokens_api_v1_auth_refresh_post
• Source code: backend/app/routers/auth.py, line 737
• Specification: OpenAPI JSON