SuperdindaDocs
Auth

Refresh

POST
/auth/refresh

Trades the refresh cookie for a fresh access JWT. A dead cookie is cleared on refusal.

Response Body

A fresh access JWT

application/json
  1. response
success*true
Value intrue
data*
Example Request
curl -X POST 'http://localhost:3000/auth/refresh'
Example Response
{  "success": true,  "data": {    "accessToken": "string",    "expiresAtMs": "string"  }}

Sign in with a provider POST

Google or Apple ID token, verified against the provider's keys. A verified email that already has an account links to it; an unknown one signs up.

Logout POST

Revokes the refresh session and clears its cookie. Always 204, even without a session.