---
title: "Exchange Supabase tokens for session cookies"
method: POST
path: "/auth/exchange-supabase-token"
tags: ["Auth"]
---

# Exchange Supabase tokens for session cookies

`POST /auth/exchange-supabase-token`

## Request

- Base URL: `https://api.apphandoff.com/api`
- URL: `https://api.apphandoff.com/api/auth/exchange-supabase-token`
- Auth: none required

Accepts Supabase access/refresh tokens, sets session cookies, returns redirect URL.

## Request body

- object
  - `access_token` string, required
  - `refresh_token` string, required
  - `redirect_to` string

## Response `200`

Session established

- object
  - `redirectTo` string

## Other responses

- `400`: Invalid request

---

[API](https://skmtc.dev/apphandoff/apis/apphandoff-api.md) · [All operations](https://skmtc.dev/apphandoff/apis/apphandoff-api/llms.txt) · [OpenAPI document](https://skmtc.dev/apphandoff/apis/apphandoff-api/revisions/9f138fe46d56?raw)