---
title: "Verify the sign-in assertion → consent token"
method: POST
path: "/approvals/session"
tags: ["approvals"]
---

# Verify the sign-in assertion → consent token

`POST /approvals/session`

## Request

- Base URL: `https://api.bubblio.dev`
- URL: `https://api.bubblio.dev/approvals/session`
- Auth: none declared

## Request body

- object
  - `credential` object, required: The WebAuthn authentication response JSON.

## Response `200`

The Bearer token for /approvals/mine.

- object
  - `token` string, required

## Other responses

- `400`: One calm sentence naming the malformed field.
- `429`: Per-IP ceiling tripped.

---

[API](https://skmtc.dev/bubblio/apis/bubblio-agent-door-api.md) · [All operations](https://skmtc.dev/bubblio/apis/bubblio-agent-door-api/llms.txt) · [OpenAPI document](https://skmtc.dev/bubblio/apis/bubblio-agent-door-api/revisions/d858aff9c01d?raw)