Rotate an end-user refresh token | Runtype Documentation

Exchanges a refresh token for a fresh access + refresh token pair. Refresh tokens are single-use; reusing a rotated-out token revokes its whole session family.

Request

This endpoint expects an object.

refreshTokenstringRequired1-255 characters

Response

End-user access + refresh tokens

accessTokenstring

Runtype-issued end-user access token: rt_eu_ + ES256 JWT (1 hour)

endUserobject

expiresIninteger

refreshTokenstring

Rotating refresh token (single-use, 30 days)

tokenTypeenum

Errors

400

Bad Request Error

401

Unauthorized Error

500

Internal Server Error

$	curl -X POST https://api.runtype.com/v1/end-user-auth/refresh \
>	-H "Content-Type: application/json" \
>	-d '{
>	"refreshToken": "rt_refresh_3f5a9b7c2d1e4f6a8b9c0d1e2f3a4b5c"
>	}'

1	{
2	"accessToken": "rt_eu_eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJlNzY1NDMyMSIsImV4cCI6MTY5ODQ4MDAwMCwiaXNzIjoicnVudHlwZS5jb20ifQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c",
3	"endUser": {
4	"displayName": "Alex Johnson",
5	"email": "alex.johnson@example.com",
6	"id": "eu_9876543210abcdef",
7	"tenantOrganizationId": "org_1234567890abcdef"
8	},
9	"expiresIn": 3600,
10	"refreshToken": "rt_refresh_7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f",
11	"tokenType": "Bearer"
12	}