internal authentication

Exchange Session

Retain the existing bearer exchange, bounded by the access-token expiry.

Only previously registered Internal Ops sessions can be exchanged. An opaque cookie replaces the legacy JWT cookie; this exchange never needs KMS or a refresh token and never creates staff identities or grants.

post/api/internal-operations/v1/session

Request

  • Base URL
    https://api.brumby.com (the document declares no server; this is the origin it was published from)
  • URL
    https://api.brumby.com/api/internal-operations/v1/session
  • Auth
    none declared

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.