curl -X POST https://api.vouchmark.com/v1/refresh-token \
-H "Content-Type: application/json" \
-d '{"refreshToken":"eyJhbGciOiJIUzI1NiIs..."}'
{
"success": true,
"message": "Token refreshed successfully"
}
Auth
Refresh token
Rotate the session and issue fresh auth cookies.
POST
/
v1
/
refresh-token
curl -X POST https://api.vouchmark.com/v1/refresh-token \
-H "Content-Type: application/json" \
-d '{"refreshToken":"eyJhbGciOiJIUzI1NiIs..."}'
{
"success": true,
"message": "Token refreshed successfully"
}
Rotates the refresh token and issues a new access token. The refresh token is read from the
The new access token and rotated refresh token are delivered as httpOnly
refreshToken cookie if present, or from the request body. This endpoint requires no auth middleware.
Body
string
The refresh token to rotate. Optional — if omitted, the value is read from the
refreshToken cookie.curl -X POST https://api.vouchmark.com/v1/refresh-token \
-H "Content-Type: application/json" \
-d '{"refreshToken":"eyJhbGciOiJIUzI1NiIs..."}'
{
"success": true,
"message": "Token refreshed successfully"
}
token and refreshToken cookies — they are not returned in the JSON body. The previous refresh token stays valid for a short grace window to absorb concurrent requests.