Implement GET on /refresh #3

New issue

Closed

opened 2026-03-18 19:51:38 +00:00 by charlie · 0 comments

charlie commented

2026-03-18 19:51:38 +00:00

Owner

Summary

Implement the GET /refresh endpoint to allow clients to obtain a new JWT access token using a valid refresh token.

Behaviour

Accept a valid refresh token (via Authorization header)
Validate the refresh token
On success, return:
- Response body: A new JWT access token, and a new refresh token
On failure, return an appropriate error

Acceptance Criteria

GET /refresh returns 200 with a new JWT in the response body
A new refresh token is returned in the response body
An expired or invalid refresh token returns 401
Old refresh token is invalidated after use

## Summary Implement the GET /refresh endpoint to allow clients to obtain a new JWT access token using a valid refresh token. ## Behaviour 1. Accept a valid refresh token (via Authorization header) 2. Validate the refresh token 3. On success, return: - Response body: A new JWT access token, and a new refresh token 4. On failure, return an appropriate error ## Acceptance Criteria - [x] GET /refresh returns 200 with a new JWT in the response body - [x] A new refresh token is returned in the response body - [x] An expired or invalid refresh token returns 401 - [x] Old refresh token is invalidated after use

charlie added this to the Working AUTH milestone

2026-03-18 19:51:38 +00:00

charlie self-assigned this

2026-03-18 19:51:38 +00:00

charlie referenced this issue

2026-03-20 22:05:01 +00:00

feature/auth #4

charlie closed this issue

2026-03-20 22:05:57 +00:00