- Cookie-based (recommended): Omit kmsPayload, uses HTTP-only cookies
- Body-based (legacy): Include kmsPayload with tokens
Interfaces
RefreshSessionRequest
Refresh session request (supports cookie-based and body-based flows)