Skip to content
IForevents Docs
IForevents Docs
HomeDashboardGitHubPrivacyTermsSecurityIntroduction
Support and SLA

Rotate a refresh token

POST
/v1/auth/refresh

Returns a new pair and revokes the presented refresh token, which is single use. Every sign-in has its own refresh token, so a rotation leaves the account's other sessions signed in, and a rejected token revokes nothing. The new refresh token lasts REFRESH_TOKEN_TTL_HOURS from now.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/v1/auth/refresh" \  -H "Content-Type: application/json" \  -d '{    "refresh_token": "rt_2f7c…",    "user_uuid": "c1d2e3f4-a5b6-4c7d-8e9f-0a1b2c3d4e5f"  }'
{  "token": {    "expiration_date": "2026-09-13T13:30:45Z",    "refresh_token": "rt_2f7c…",    "token": "eyJhbGciOiJFZERTQSJ9.e30.sig"  }}
refresh_token*string
user_uuid*string
Formatuuid