Refresh token

curl -X POST https://api.vouchmark.com/v1/refresh-token \
  -H "Content-Type: application/json" \
  -d '{"refreshToken":"eyJhbGciOiJIUzI1NiIs..."}'

{
  "success": true,
  "message": "Token refreshed successfully"
}

POST

refresh-token

curl -X POST https://api.vouchmark.com/v1/refresh-token \
  -H "Content-Type: application/json" \
  -d '{"refreshToken":"eyJhbGciOiJIUzI1NiIs..."}'

{
  "success": true,
  "message": "Token refreshed successfully"
}

Rotates the refresh token and issues a new access token. The refresh token is read from the refreshToken cookie if present, or from the request body. This endpoint requires no auth middleware.

Body

string

The refresh token to rotate. Optional — if omitted, the value is read from the refreshToken cookie.

curl -X POST https://api.vouchmark.com/v1/refresh-token \
  -H "Content-Type: application/json" \
  -d '{"refreshToken":"eyJhbGciOiJIUzI1NiIs..."}'

{
  "success": true,
  "message": "Token refreshed successfully"
}

The new access token and rotated refresh token are delivered as httpOnly token and refreshToken cookies — they are not returned in the JSON body. The previous refresh token stays valid for a short grace window to absorb concurrent requests.

Overview

Auth

Companies

Verifications

Onboarding (KYB)

Widget Embed (Runtime)

Trust Badge

Monitoring

Investigations

Disputes

Vouch AI

Compliance

Wallet & Billing

Developers

Body

​Body

Body