Skip to main content
2026-07-29 16:01
REST API

Token Refresh

AuthRequestValidateMedium
Try Interactive Demo

What you will learn

  • Verify refresh tokens rotate on use — stale refresh tokens must become invalid
  • Test the race where two requests refresh simultaneously — server must handle gracefully
  • Ensure refresh tokens have strict storage requirements (httpOnly, Secure, SameSite)

Description

Refresh expired access token using refresh token.

Test Scenario

const response = await request.post('/api/v1/auth/refresh', {
  data: { refresh_token: 'your_refresh_token' }
});
const { access_token } = await response.json();
Endpoint/api/v1/auth/refresh

Testing Tips

  • •Send refresh_token in body
  • •Receive new access_token
  • •Handle expired refresh token
// Playwright API Testing - REST
import { test, expect } from '@playwright/test';


test('REST API request', async ({ request }) => {
  const response = await request.get('/api/v1/resource');


  expect(response.ok()).toBeTruthy();
  expect(response.status()).toBe(200);


  const data = await response.json();
  expect(data).toBeDefined();
});

Challenge ID: rest-auth-refresh

2 frameworks available

API Playground

Send requests and inspect responses

Endpoint: /api/v1/auth/refresh

Press Enter to send