Refresh a CLI access token.
Trades a refresh token for a new access token and refresh token without another browser round trip, returning the same session payload as the initial exchange. Pass organization_id to move the refreshed session to another organization the signed-in user belongs to. Store the returned refresh token: the presented one is consumed.
POST
Refresh a CLI access token.
Authorizations
A Rafflesia API key, sent as Authorization: Bearer <key>.
Previous
Exchange a CLI authorization code for an access token.Completes the PKCE flow: send the authorization code your loopback callback received together with the code_verifier matching the challenge you started with, and receive an access token, a refresh token, and the identity, organization, role, and entitlements the session carries. The code is single-use, and an exchange without the matching verifier is rejected.
Next
Refresh a CLI access token.