Cloud browser

Trade the bootstrap code for the session token

The popup page calls this once, with the code from its address fragment. The code lives two minutes and works once; a second redemption answers 410 browser_link_used. The Origin header must be on the server's return origin allowlist (a browser sends it; a request with none is refused with browser_customer_present_only). The token it returns lives in the popup's memory only.

post/browser-sessions:redeem

Request

  • Base URL: https://api.customdomain.ai/v1
  • URL: https://api.customdomain.ai/v1/browser-sessions:redeem
  • Auth: none required

Request body

codestring required

Response

The session token and the first view.

session_idstring required
tokenstring required

The session token. A bearer: never log it or store it.

Changes

No recorded changes to this operation across all 1 revision of this API.