john-okeefe
1e04ef4861
- Test password complexity requirements - Test account lockout mechanism - Test rate limiting functionality - Test JWT expiration (1 hour) - Test refresh token expiration (7 days) - Test password requirements list - Verify transaction manager and error handler types - All tests passing
88 lines
2.2 KiB
Plaintext
88 lines
2.2 KiB
Plaintext
{
|
|
"meta": {
|
|
"name": "Refresh Access Token",
|
|
"type": "http",
|
|
"seq": 1,
|
|
"auth": "Inherit"
|
|
},
|
|
"request": {
|
|
"method": "POST",
|
|
"header": [
|
|
{
|
|
"name": "Content-Type",
|
|
"value": "application/json"
|
|
}
|
|
],
|
|
"body": {
|
|
"type": "json",
|
|
"json": {
|
|
"refresh_token": "{{refreshToken}}"
|
|
}
|
|
},
|
|
"url": {
|
|
"raw": "{{baseUrl}}/api/auth/refresh",
|
|
"host": ["{{baseUrl}}"],
|
|
"path": ["api", "auth", "refresh"]
|
|
},
|
|
"description": "Refreshes an access token using a valid refresh token. Returns a new access token with 1-hour expiration."
|
|
},
|
|
"response": [
|
|
{
|
|
"name": "Success Response",
|
|
"originalRequest": {
|
|
"method": "POST",
|
|
"header": [],
|
|
"body": {
|
|
"type": "json",
|
|
"json": {
|
|
"refresh_token": "valid-refresh-token-uuid"
|
|
}
|
|
},
|
|
"url": {
|
|
"raw": "{{baseUrl}}/api/auth/refresh",
|
|
"host": ["{{baseUrl}}"],
|
|
"path": ["api", "auth", "refresh"]
|
|
}
|
|
},
|
|
"status": 200,
|
|
"code": 200,
|
|
"header": [
|
|
{
|
|
"name": "content-type",
|
|
"value": "application/json"
|
|
}
|
|
],
|
|
"body": "{\n \"access_token\": \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...\",\n \"token_type\": \"Bearer\",\n \"expires_in\": 3600\n}",
|
|
"description": "Returns a new access token that expires in 1 hour (3600 seconds)."
|
|
},
|
|
{
|
|
"name": "Invalid Refresh Token",
|
|
"originalRequest": {
|
|
"method": "POST",
|
|
"header": [],
|
|
"body": {
|
|
"type": "json",
|
|
"json": {
|
|
"refresh_token": "invalid-token"
|
|
}
|
|
},
|
|
"url": {
|
|
"raw": "{{baseUrl}}/api/auth/refresh",
|
|
"host": ["{{baseUrl}}"],
|
|
"path": ["api", "auth", "refresh"]
|
|
}
|
|
},
|
|
"status": 401,
|
|
"code": 401,
|
|
"header": [
|
|
{
|
|
"name": "content-type",
|
|
"value": "application/json"
|
|
}
|
|
],
|
|
"body": "{\n \"error\": \"invalid or expired refresh token\"\n}",
|
|
"description": "Returned when the refresh token is invalid, expired, or has been revoked."
|
|
}
|
|
]
|
|
}
|