post:
  tags:
    - Session
  summary: Refresh the session cookies
  description: Rotates HttpOnly token cookies when the refresh token is still valid.
  operationId: post-api-auth-refresh
  security: []
  responses:
    "204":
      description: Session refreshed.
    "401":
      description: Missing or invalid refresh token.
      content:
        application/json:
          schema:
            $ref: ../components/schemas.yaml#/Error
          example:
            error:
              code: UNAUTHENTICATED
              message: Missing refresh token.
              correlationId: 11111111-1111-4111-8111-111111111111
    "403":
      description: CSRF origin check failed.
      content:
        application/json:
          schema:
            $ref: ../components/schemas.yaml#/Error
          example:
            error:
              code: FORBIDDEN
              message: Origin is not allowed.
              correlationId: 11111111-1111-4111-8111-111111111111