Extend the session
POST/admin/auth/refresh
Reissues the cookie from the current session's claims and answers the new
expires_in.
It is the one route that accepts a just-expired session: refreshing a
credential that has not expired yet is not what the endpoint is for. Past the
refresh window the answer is 401 and the way back is a fresh sign-in, not a
retry.
Responses
- 200
- 401
- 403
Cookie reissued
No session cookie, or it is past the refresh window
account_suspended