Default off, broker only: redeem a TCP ticket into a lease

Internal broker only; excluded from public SDK methods. Default off. Check exact tenant, route, role, generation, credential, unconsumed ticket and current authorizing administrator/paid authority. Atomic admission limits are 128 live legs globally, 16 per organization and 8 per route. A consumed ticket remains consumed after broker restart. Compare every returned lease binding. Strict JSON, 4096-byte bodies, 2000 requests/minute.

post/v1/internal/gateway/tcp/redeem

Request

  • Base URL: https://api.decionis.com
  • URL: https://api.decionis.com/v1/internal/gateway/tcp/redeem
  • Auth: HTTP bearer

Request body

ticketstring required

Sensitive opaque capability; never put in a URL, log, analytics event or ordinary resource view.

route_idstring uuid required
tenant_hoststring required
role'connector' | 'client' required

Response

Private bounded result.

lease_idstring uuid required
lease_tokenstring required

Sensitive opaque capability; never put in a URL, log, analytics event or ordinary resource view.

org_idstring uuid required
route_idstring uuid required
generationinteger required

Non-secret fencing generation. Discard stale reveals and clear displayed credentials when this changes.

tenant_hoststring required
role'connector' | 'client' required
resource_hashstring required

SHA-256 lowercase hex of the canonical saved numeric IP:port resource string, not a customer payload.

expires_atstring date-time required

Changes

No recorded changes to this operation across all 1 revision of this API.