Refresh Token

POST /auth/refresh

Refresh Token

cURL

curl --request POST \
  --url https://api.example.com/auth/refresh \
  --header 'Content-Type: application/json' \
  --data '
{
  "refreshToken": "<string>"
}
'

200

{
  "accessToken": "<string>",
  "refreshToken": "<string>"
}

Refreshes an expired access token using a valid refresh token.

Request Body

refreshToken · string · required

Valid refresh token obtained from the login endpoint. The refresh token is used to generate a new access token and refresh token pair.

Example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...

Response

accessToken · string

New JWT access token for authenticated requests. Valid for 1 hour.

refreshToken · string

New JWT refresh token. Valid for 7 days.

Example Request

curl -X POST https://api.falconalert.com/auth/refresh \
  -H "Content-Type: application/json" \
  -d '{
    "refreshToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxIiwidHlwZSI6InJlZnJlc2giLCJpYXQiOjE3NjEyOTI0MTEsImV4cCI6MTc2MTg5NzIxMX0.tA-fCXWmhTzE1YlOXTpftjn_qFzZJoZaCJEPBEYrYZI"
  }'

Example Response

Success (200)

{
  "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxIiwidHlwZSI6ImFjY2VzcyIsInByb2ZpbGUiOnsiaWQiOiIxIiwiZW1haWwiOiJhcnR1cm9AZ21haWwuY29tIiwibmFtZSI6IkFydHVybyBVdHJpbGxhYSDDiURJVCIsInJvbGVfaWQiOjF9LCJpYXQiOjE3NjEyOTI0MTEsImV4cCI6MTc2MTI5NjAxMX0.ECBWVGu-tXr7Shs9qvg9LMISOXtFQmp3R8C5Uk8cUuw",
  "refreshToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxIiwidHlwZSI6InJlZnJlc2giLCJpYXQiOjE3NjEyOTI0MTEsImV4cCI6MTc2MTg5NzIxMX0.tA-fCXWmhTzE1YlOXTpftjn_qFzZJoZaCJEPBEYrYZI"
}

Status Codes

Code	Description
200	Token refreshed successfully. Returns new access and refresh tokens.
401	Invalid or expired refresh token.
404	User associated with the refresh token not found.

Notes

• Both the access token and refresh token are rotated when using this endpoint
• The old refresh token becomes invalid after a successful refresh
• If the refresh token is expired, the user must login again