Refresh Token
Description
Refresh an expired access token using the refresh token stored in cookies.
Authentication
- Required: No (uses refresh token from cookies)
- Roles: None
Request
Headers
POST /v1/auth/refresh
Content-Type: application/json
Authorization: Bearer <token>
Request Body
{}
No request body required - uses refresh token from cookies.
Response
Success Response (200)
{
"data": {
"accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
}
}
accessToken:
- Type: string
- Description: New access token for authenticated requests
Error Responses
- 401: Invalid or expired refresh token
- 422: Validation errors (see Error Response Format)
Error Codes
- E001_AUTH_FAILURE: Authentication failure
Example Usage
curl -X POST https://api.stepx.io.vn/v1/auth/refresh \
-H "Content-Type: application/json" \
-H "Authorization: Bearer <token>" \
-b "refresh_token=your_refresh_token_here"
const response = await fetch('https://api.stepx.io.vn/v1/auth/refresh', {
method: 'POST',
headers: {
'Content-Type': 'application/json',
'Authorization': 'Bearer <token>'
},
credentials: 'include' // Include cookies
});
const data = await response.json();