Exchange the refresh cookie for a new access token
POST/api/v1/auth/refresh
Takes no body: the refresh token is the cookie. It rotates on use and a reuse ends every session for that account, which is why a second attempt with an old one is refused rather than merely ignored.
Request
Responses
- 200
- 401
A fresh session
No usable refresh token