Endpoint: GET /auth/access-token
Description: Generate a new access token using refresh token.
Cookies:
refreshToken
(required)
Success Response (200):
{
"success": true,
"accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
}
Cookies Set:
accessToken
(HttpOnly, Secure, SameSite=None, 1 hour expiry)
Error Responses:
401 Unauthorized:
{
"success": false,
"message": "No refresh token provided"
}
{
"success": false,
"message": "Invalid or expired refresh token."
}