Refresh Token

POST /v1/users/auth/refresh

Auth: None

Field	Type	Required	Description
refreshToken	string	Yes	The refresh token from the last login/refresh

curl -X POST https://api.2settle.io/v1/users/auth/refresh \
  -H "Content-Type: application/json" \
  -d '{ "refreshToken": "6f2c9a8e..." }'

{
  "success": true,
  "data": {
    "accessToken": "eyJhbGciOi...",
    "refreshToken": "d47a1c9e...",
    "expiresInSec": 900
  }
}

Notes:

• Revokes the presented token and issues a brand new pair in the same call — treat every refresh response as the new source of truth and discard the old tokens.
• Reusing an already-rotated (or expired/unknown) token fails with INVALID_REFRESH_TOKEN (401), which your client should treat as "user must log in again."