logo
AuthRotate the refresh token and issue a new access token

Rotate the refresh token and issue a new access token

curl -X POST "https://mail.haltman.io/api/auth/refresh" \
  -H "Content-Type: application/json" \
  -H "X-CSRF-Token: YOUR_API_KEY"
{
  "ok": true,
  "action": "refresh",
  "refreshed": true,
  "session": {
    "session_family_id": "example_string",
    "access_expires_at": "2024-12-25T10:00:00Z",
    "refresh_expires_at": "2024-12-25T10:00:00Z"
  }
}
POST
/api/auth/refresh
POST
API Key (cookie: __Host-refresh)
__Host-refreshstring
Required

Refresh-session cookie used to rotate sessions and derive CSRF tokens.

Refresh-session cookie used to rotate sessions and derive CSRF tokens.
API Key (header: X-CSRF-Token)
X-CSRF-Tokenstring
Required

CSRF token derived from the current session family.

CSRF token derived from the current session family.
Request Preview
Response

Response will appear here after sending the request

Authentication

path
parameterstring
Required

API Key for authentication. Refresh-session cookie used to rotate sessions and derive CSRF tokens.

header
X-CSRF-Tokenstring
Required

API Key for authentication. CSRF token derived from the current session family.

Responses

okboolean
Required
actionstring
Required
Allowed values:refresh
refreshedboolean
Required
sessionobject
Required