BAbase44

Create an embed sign-in token

Changed on

<Info>This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.</Info>

Creates a single-use sign-in token for a provisioned app user and returns embed_url, the chosen surface's address with the token on it. Load it in an iframe and the app opens signed in as that user. The app's owner can be signed in without being provisioned, by a workspace API key or by the owner's own token. live_preview starts the app's sandbox if it isn't running; until it is, the URL shows a loading page. Call it with a personal access token whose owner can edit the app, or with a workspace API key that has the Mint embed sign-in tokens permission. Limited to 300 requests a minute per app. Higher plans get a higher limit.

post/api/apps/{app_id}/embed-url

Request

  • Base URL
    https://app.base44.com
  • URL
    https://app.base44.com/api/apps/{app_id}/embed-url
  • Auth
    • HTTP bearer
    • or API key in header api_key
    • or HTTP bearer

Path parameters

app_idstring required

ID of the app.

Request body

emailstring email required

The app user's email

target'live_site' | 'latest_preview' | 'live_preview'

The surfaces a platform may frame, named by their UrlType.

A subset rather than UrlType itself: the rest of that enum is either internal (platform, pentest) or addresses a revision, and a public payload should not offer what it will only refuse.

Response

Successful Response

tokenstring required

The single-use sign-in token. Already on embed_url; you don't need to send it anywhere yourself.

expires_ininteger required

Seconds until the token expires.

embed_urlstring required

The chosen surface's address with the token on it. Load it in an iframe.

Example response

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.e30.sig",
  "expires_in": 60,
  "embed_url": "https://weekly-report.base44.app/?ott=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.e30.sig"
}

Changes

  • bbcd7d7e2e72Revision changes
    • info

      the endpoint scheme security WorkspaceApiKeyBearerAuth was added to the API

  • 80287813ab84Revision changes
    • info

      the security scope app_users:embed_token was added to the endpoint's security scheme WorkspaceApiKeyAuth

    • info

      the security scope full_access was added to the endpoint's security scheme PersonalAccessTokenAuth