Skip to main content
POST
/
api
/
auth
/
refresh
Refresh Access Token
curl --request POST \
  --url https://api.example.com/api/auth/refresh \
  --header 'Content-Type: application/json' \
  --data '
{
  "refreshToken": "<string>"
}
'
{
  "accessToken": "<string>"
}
Generates a new access token using a valid refresh token. Use this endpoint when the access token expires to maintain user sessions without requiring re-authentication.

​
Request Body

​
refreshToken
string
required
The refresh token obtained from the login endpoint.

​
Response

​
accessToken
string
New JWT access token for authenticating API requests.

​
Error Responses

​
400 Bad Request

Returned when:
  • Refresh token is missing
  • Refresh token is not a string

​
401 Unauthorized

Returned when:
  • Refresh token has expired (TokenExpiredError)
  • Refresh token is invalid or malformed (JsonWebTokenError)
  • Refresh token is not yet valid (NotBeforeError)
  • Token verification fails for other reasons

​
500 Internal Server Error

Returned when:
  • Access token generation fails

​
Example Request

curl -X POST https://api.tresacontafy.com/api/auth/refresh \
  -H "Content-Type: application/json" \
  -d '{
    "refreshToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
  }'

​
Example Response

{
  "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
}

​
Error Response Examples

​
Expired Token

{
  "error": "Refresh token expirado",
  "message": "Tu sesión ha expirado. Por favor inicia sesión nuevamente."
}

​
Invalid Token

{
  "error": "Refresh token inválido",
  "message": "El token de renovación no es válido. Por favor inicia sesión nuevamente."
}
When a refresh token expires or is invalid, the user must log in again to obtain new tokens. The client should redirect to the login page in these cases.

​
Token Lifecycle

  1. User logs in and receives both access and refresh tokens
  2. Client uses access token for API requests
  3. When access token expires, client uses refresh token to get a new access token
  4. Client continues using the new access token
  5. When refresh token expires, user must log in again

Build docs developers (and LLMs) love

Get started for freeTalk to us