Refresh access token

POST

/api/v1/auth/refresh_token

Use this endpoint to get a new access token when the current one expires.
The refresh token is rotated on each use for security.
If the refresh token is expired or invalid, a 401 error is returned silently.

Request

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

Token refreshed successfully

Bodyapplication/json

🟠401Unauthorized

Request Example

Shell

JavaScript

Java

Swift

curl --location '/api/v1/auth/refresh_token' \
--header 'Content-Type: application/json' \
--data '{
    "refresh_token": "string",
    "device": {
        "device_id": "550e8400-e29b-41d4-a716-446655440000",
        "device_name": "iPhone 15 Pro",
        "device_type": "ios",
        "user_agent": "Hisabin/1.0.0 (iOS 17.0)"
    }
}'

Response Example

200 - Example 1

{
    "success": true,
    "data": {
        "user": {
            "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
            "email": "user@example.com",
            "full_name": "string",
            "status": "inactive",
            "role": "user",
            "confirmed": true,
            "plan": {
                "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
                "name": "Free",
                "code": "free"
            },
            "created_at": "2019-08-24T14:15:22.123Z",
            "updated_at": "2019-08-24T14:15:22.123Z"
        },
        "tokens": {
            "access_token": "string",
            "refresh_token": "string",
            "expires_in": 900,
            "token_type": "Bearer"
        }
    }
}

Modified at 2025-12-03 16:47:21

Logout from current device