刷新会话
OpenAPI 契约
- 方法
- POST
- 路径
/api/v1/auth/refresh- 认证
- None
- 响应状态
- 200 400 429 500
请求与响应 Schema
JSON
{
"requestBody": {
"application/json": {
"$ref": "#/components/schemas/RefreshTokenRequest"
}
},
"responses": {
"200": {
"description": "Session refreshed",
"content": {
"application/json": {
"$ref": "#/components/schemas/AuthResponse"
}
}
},
"400": {
"description": "Invalid request",
"content": {
"application/json": {
"$ref": "#/components/schemas/RequestError"
}
}
},
"429": {
"description": "Rate limit exceeded",
"content": {
"application/json": {
"$ref": "#/components/schemas/SecurityError"
}
}
},
"500": {
"description": "Unexpected server error",
"content": {
"application/json": {
"$ref": "#/components/schemas/ApiError"
}
}
}
}
}POST /api/v1/auth/refresh 为公开接口,以 JSON 接收非空的 refreshToken。它会轮换刷新令牌,并返回新的访问令牌、刷新令牌、令牌类型和访问令牌有效期。
请原子地替换已存储的刷新令牌:成功轮换后旧刷新令牌只能使用一次。无效、类型错误、过期或重放的刷新令牌会产生会话无效认证错误。不得将其发送给第三方。
http
POST /api/v1/auth/refresh
Content-Type: application/json