# GET /api/v1/auth/refresh-token

**Refresh existing authentication**

## Access Refresh

Once authenticated, an issued API Access Token will expire after 30 minutes.

This authenticated endpoint will "refresh" the access token by issuing a new jwt token with an extended expiration.

This endpoint refreshes only access tokens that were issued from a [StackHawk API Key](https://app.stackhawk.com/settings/apikeys) via the `/login` route. A browser session (`APPLICATION`) token obtained by signing in to the StackHawk web app cannot be refreshed here; presenting one returns `401 Unauthorized`. Browser sessions are refreshed by the web app itself.

For best practices, use the `/refresh-token` route for refreshing authentication access to extend the API session.

## Responses

### 200 — * A [JSON Web Token](https://jwt.io/) used to authenticate requests to the StackHawk API

#### application/json

- `token` (string) — the bearer token value

#### application/x-protobuf

- `token` (string) — the bearer token value