Refresh session token
Authentication
Refresh session token
Rotates a session. Safe to call directly from the browser — it takes no API key and no identity fields.
Both tokens are replaced on every call and the presented refresh token is spent. Presenting a spent token means two holders exist, so the entire session is revoked and the call fails: the client must bootstrap again through your backend.
The user, billing group and tool credentials carry forward from the session unchanged. None of them can be supplied here.
POST
Refresh session token
Body
application/json
Minimum string length:
1Example:
"snrt_9f2c41ab7e0d4856b3a0c7e19d5f8240"
Response
Rotated