> ## Documentation Index
> Fetch the complete documentation index at: https://docs.platform.arb.inc/llms.txt
> Use this file to discover all available pages before exploring further.

# Refresh access token

> Exchanges a refresh token for a new access token without requiring reauthentication. The access token includes any roles that were previously attached to the session.



## OpenAPI

````yaml api-reference/auth.yaml post /sessions/refresh
openapi: 3.0.3
info:
  title: auth
  description: >-
    The Auth Service is the single source of truth for all accounts and their
    permissions, managing authentication and access control across the platform.
    It maintains efficiency at scale by issuing access tokens to accounts when
    they log into the platform and providing public keys for other services to
    verify them.
  version: 1.0.0
servers:
  - url: https://auth.platform.arb.inc
security: []
tags:
  - name: /
  - name: authenticate
  - name: internal
  - name: organizations
  - name: sessions
  - name: users
paths:
  /sessions/refresh:
    post:
      tags:
        - sessions
      summary: Refresh access token
      description: >-
        Exchanges a refresh token for a new access token without requiring
        reauthentication. The access token includes any roles that were
        previously attached to the session.
      operationId: refreshSession
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
                - refreshToken
              properties:
                refreshToken:
                  type: string
                  description: The refresh token from a previous authentication
                  example: a7b3c4d5e6f7g8h9i0j1k2l3m4n5o6p7
      responses:
        '200':
          description: Successfully refreshed session
          content:
            application/json:
              schema:
                type: object
                properties:
                  accessToken:
                    type: string
                    description: New JWT access token for authenticated requests
                    example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
                  refreshToken:
                    type: string
                    description: Refresh token (may be rotated)
                    example: a7b3c4d5e6f7g8h9i0j1k2l3m4n5o6p7
                  validForSeconds:
                    type: integer
                    description: Number of seconds the access token is valid
                    example: 3600
        '401':
          description: Session does not exist

````