Browse the API reference

Refresh Session

post/v1/auth/refresh

Part of Auth.

Revokes the current token and issues a new one. Accepts recently-expired tokens within the grace period.

Authentication

This operation does not require an API key.

Example request

curl

curl -X POST "https://api.robosystems.ai/v1/auth/refresh"

Responses

200 Successful Response

Field	Type	Description
`user`required	object	User information
`org`optional	object	Organization information (personal org created automatically on registration)
`message`required	string	Success message
`status`optional	string	Login flow state: authenticated (token present), or a passkey MFA step is required before a session is issued (mfa_token present) One of: `authenticated`, `mfa_required`, `mfa_enrollment_required` Default: `authenticated`
`mfa_token`optional	string	Short-lived token authorizing the MFA second step or forced enrollment; present only when status is not 'authenticated'
`token`optional	string	JWT authentication token (optional for cookie-based auth)
`expires_in`optional	integer	Token expiry time in seconds from now
`refresh_threshold`optional	integer	Recommended refresh threshold in seconds before expiry

Status	Meaning
400	Invalid request
429	Rate limit exceeded
500	Internal server error