Create a Refresh Token Feature in your Strapi Application

There are some “missing links”…
When I request api
POST http://localhost:1337/api/token/refresh
body : { refreshToken:"~~" }

it returns 403