Token rotation vault

Hello,

I’ve been trying to find a way to rotate tokens in vault, but I haven’t been able to.
My use case is retrieving a certificate from an arbitrary host using curl, but also not having to use the same token (for security reasons), so I’d like to rotate it.

The way I understand rotation is that I send a request authenticating myself with the current token to a rotate endpoint. The response for this request should be a new token with a new expiration date that invalidates the previous one. Just like, for example, gitlab or so many other services.

Any ideas where where I can find documentation for this?