Re-mint a session from a trusted-device token

Exchanges a trusted-device token (the credential — no access token required) for a fresh access + refresh pair plus a rotated trusted-device token. Same shape as /auth/refresh plus the rotated credential. Any terminal failure (dead/revoked/expired/mismatch/reuse/inactive) returns 401 with a machine code so the client wipes the local token and forces password; treat 5xx/network as transient and retry.

Access: Public endpoint.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params
string
required

The opaque trusted-device token issued at enrolment / last re-mint.

string
required

The device identifier the token is bound to.

Responses

401

Terminal — token dead/revoked/expired, deviceId mismatch, reuse detected, or user inactive. Body carries error.code.

Language
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json