Exchange a valid refresh token (cookie or body) for a new access token. Public endpoint.
When true, validates/simulates but performs no writes. Required for docs playground.
true Refresh token (optional if sent in refresh_token cookie)
"abc123.def456"
Success
New JWT access token
"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."