Refresh Session

Exchange a refresh token for a short-lived session token (10 min).

If user_id differs from the token owner, checks team membership and issues a delegated session token (sub=owner, uid=target).

POST /api/v1/auth/refresh

Refresh Session

cURL

curl --request POST \
  --url https://api.hevn.finance/api/v1/auth/refresh \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "userId": "<string>"
}
'

200

{
  "accessToken": "<string>",
  "tokenType": "bearer",
  "expiresIn": 600
}

Authorizations

Authorization · string · header · default: Bearer <token> · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

user-agent · string | null

Body

application/json

Request for refreshing a session token.

userId · string · required

Target user UUID

Response

200

application/json

Successful Response

Response with short-lived JWT session token.

accessToken · string · required

JWT access token (10 min)

tokenType · string · default: bearer

expiresIn · integer · default: 600

Token TTL in seconds