Editing SimTX API v24/Device login (section)

== Refreshing ==
<code>POST /api/v1/device/refresh</code>. No authentication.

<syntaxhighlight lang="json">
{ "refreshCredential": "stx_rt1_b77d…" }
</syntaxhighlight>

On success the response is <code>200 OK</code> with a new credential pair in the same format as above. '''The refresh credential rotates on every use.''' Store the new one immediately and discard the old one.

{| class="wikitable"
! HTTP !! <code>code</code> !! Meaning
|-
| 401 || <code>invalid_grant</code> || The refresh credential is unknown, expired, or its device session was revoked. Sign in again.
|-
| 401 || <code>refresh_reuse_detected</code> || A refresh credential that had already been used was presented again. The service treats this as theft and revokes the whole device session. Sign in again.
|}

Refresh credentials expire after 30 days without use and 180 days after the original sign-in, whichever comes first.