POST /tokens/refresh accepts requests without input validation. Add schema validation and reject malformed payloads with a clear error code.
POST /tokens/refresh accepts requests without input validation. Add schema validation and reject malformed payloads with a clear error code.