Renew the access token from the session cookie
POST/api/auth/refresh
Redeems the refresh token held in the startupos_session cookie and returns a new access token. There is no request body. The cookie is rewritten with the refresh token Keycloak returns. If Keycloak refuses the token the cookie is cleared; if Keycloak is unreachable the cookie is kept.
Request
Responses
- 200
- 401
- 502
- 503
Renewed.
Response Headers
Set-Cookie
The rewritten startupos_session cookie.
There is no session cookie, or the session has ended. The body carries a null token and a reason.
Keycloak could not be reached.
This deployment cannot renew a session.