Token Based Auth - refresh token

[asanzjones]

I have a couple of questions related to the Token Based Auth plugin refresh token configuration.

1. What’s the http verb expected for the refresh endpoint (GET, POST, …)?

2. When does the plugin call the refresh endpoint (under which conditions)?

3. How does the plugin use the refresh token obtained?