Refresh Token

curl -X POST https://api.webyes.com/api/auth/refresh-token \
  -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."

{
  "success": true,
  "data": {
    "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.new_payload..."
  }
}

POST

api

auth

refresh-token

curl -X POST https://api.webyes.com/api/auth/refresh-token \
  -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."

{
  "success": true,
  "data": {
    "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.new_payload..."
  }
}

POST

/api/auth/refresh-token

Issues a new access token, allowing clients to stay authenticated without prompting the user to log in again.

Implement silent refresh by calling this endpoint ~60 seconds before the access token’s exp claim.

Headers

string

required

Bearer <access_token> — the current (not yet expired) JWT.

boolean

true when a new token has been issued.

string

A new signed JWT (RS256). Replace the previous token in your client store.

curl -X POST https://api.webyes.com/api/auth/refresh-token \
  -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."

{
  "success": true,
  "data": {
    "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.new_payload..."
  }
}

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

200

New access token issued