A valid refresh token can be obtained via the /login, /refreshtoken or /2fa/{method}/verify endpoints. A valid token can be invalidated via the /logout endpoint. It has a 14 days validity period.

In: header