feat: fully featured token checks

auth/openapi-auth.yaml

@@ -116,6 +116,22 @@ paths:
         "401":
           $ref: '#/components/responses/UnauthorizedError'
 
+  /refresh-tokens:
+    get:
+      summary: Refreshes access_token and refresh_token
+      operationId: refreshTokens
+      tags: [Auth]
+      responses:
+        # This one sets two cookies: access_token and refresh_token
+        "200":
+          description: Refresh success
+        "400":
+          $ref: '#/components/responses/ClientError'
+        "401":
+          $ref: '#/components/responses/UnauthorizedError'
+        "500":
+          $ref: '#/components/responses/ServerError'
+
 components:
   securitySchemes:
     bearerAuth:
@@ -123,4 +139,8 @@ components:
       scheme: bearer
   responses:
     UnauthorizedError:
-      description: Access token is missing or invalid
+      description: Access token is missing or invalid
+    ServerError:
+      description: ServerError
+    ClientError:
+      description: ClientError