Exchange a refresh token for a new access token

POST 
/api/v1/auth/refresh

Reads the refresh token from the safebucket_refresh_token cookie, falling back to the Authorization: Bearer header. Sets a new safebucket_access_token cookie on success.

Responses

200

New access token issued (set via cookie); body is an empty JSON object

Response Headers

Set-Cookie

New safebucket_access_token cookie

401

Missing/invalid/expired refresh token, or session revoked (FORBIDDEN, UNAUTHORIZED, SESSION_REVOKED, USER_NOT_FOUND)