Renew session JWT (replace expired token)
post_sessions_renew_session_tokenVerifies Firebase ID token. Parses sessionToken path segment as an internal SESSION JWT without
enforcing JWT expiry (signature and tokenType=SESSION are still validated). Loads the
session by id from the token subject; the Firebase UID must match the session owner.
Increments tokenRevision on the server so previous session JWTs (same session id,
older revision) are no longer accepted for GET/POST/DELETE /sessions/....
Returns a new sessionToken (with the new tokenRevision claim) and the current decrypted
payload; extends server-side session expiry by 1 hour.
If the Firebase token includes email, the server best-effort backfills it on the session owner
when the user row has no email yet (audit display only).
Use the path form POST /api/v1/sessions/renew/{sessionToken} — URL-encode the JWT (e.g. encodeURIComponent in JS).
Source: POST /api/v1/sessions/renew/{sessionToken}
Requires auth.firebaseToken and forwards it as a Bearer token.
Prefer connection.workspaceName and connection.appId as stable config instead of generating identity fields dynamically.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| auth | No | ||
| body | No | ||
| query | No | ||
| params | Yes | ||
| connection | Yes |