What changed
An unhandled branch in your error handling.
Affects POST /sessions/{session_id}/refresh.
403 is now documented
Who is affected
Code that reads POST /sessions/{session_id}/refresh.
Before and after
| Where | Before | After |
|---|---|---|
| POST /sessions/{session_id}/refresh | absent | 403 |
| POST /sessions/{session_id}/tokens | absent | 403 |
| POST /sessions/{session_id}/tokens/{template_name} | absent | 403 |
| POST /users/{user_id}/verify_password | absent | 403 |
| POST /users/{user_id}/verify_totp | absent | 403 |
Based on Clerk’s published API specification. How severity is decided.