Skip to main content

Refresh Session

POST 
/api/v1/auth/refresh

Mint a fresh access token from the HttpOnly session cookie.

No body: reads the session id from the cookie, looks up the refresh token in Redis, and calls Cognito REFRESH_TOKEN_AUTH. Rotates the stored refresh token if Cognito returns a new one. A missing/expired/revoked session → 401 (and the cookie is cleared) so the SPA falls back to login.

Responses​

Successful Response