Refresh Session

Exchange a refresh token for a short-lived session token (10 min).

If user_id differs from the token owner, checks team membership and issues a delegated session token (sub=owner, uid=target).

POST /api/v1/auth/refresh

Refresh Session

cURL

curl --request POST \
  --url https://api.hevn.finance/api/v1/auth/refresh \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "userId": "<string>"
}
'

import requests

url = "https://api.hevn.finance/api/v1/auth/refresh"

payload = { "userId": "<string>" }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({userId: '<string>'})
};

fetch('https://api.hevn.finance/api/v1/auth/refresh', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

200

{
  "accessToken": "<string>",
  "tokenType": "bearer",
  "expiresIn": 600
}

{
  "detail": [
    {
      "loc": [
        "<string>"
      ],
      "msg": "<string>",
      "type": "<string>"
    }
  ]
}

Authorizations

Authorization · string · header · default: Bearer <token> · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

user-agent · string | null

Body

application/json

Request for refreshing a session token.

userId · string · required

Target user UUID

Response

200

application/json

Successful Response

Response with short-lived JWT session token.

accessToken · string · required

JWT access token (10 min)

tokenType · string · default: bearer

expiresIn · integer · default: 600

Token TTL in seconds