刷新会话

OpenAPI 契约

方法
POST
路径
/api/v1/auth/refresh
认证
None
响应状态
200 400 429 500
请求与响应 Schema
JSON
{
  "requestBody": {
    "application/json": {
      "$ref": "#/components/schemas/RefreshTokenRequest"
    }
  },
  "responses": {
    "200": {
      "description": "Session refreshed",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/AuthResponse"
        }
      }
    },
    "400": {
      "description": "Invalid request",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/RequestError"
        }
      }
    },
    "429": {
      "description": "Rate limit exceeded",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/SecurityError"
        }
      }
    },
    "500": {
      "description": "Unexpected server error",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/ApiError"
        }
      }
    }
  }
}

POST /api/v1/auth/refresh 为公开接口,以 JSON 接收非空的 refreshToken。它会轮换刷新令牌,并返回新的访问令牌、刷新令牌、令牌类型和访问令牌有效期。

请原子地替换已存储的刷新令牌:成功轮换后旧刷新令牌只能使用一次。无效、类型错误、过期或重放的刷新令牌会产生会话无效认证错误。不得将其发送给第三方。

http
POST /api/v1/auth/refresh
Content-Type: application/json