channels
channels
android-login

Console Proxy

Changed on

Token-gated reverse proxy to fleet control console endpoint.

Auth: session_token only (NOT verify_token/get_workspace_id).

Rationale: This endpoint is loaded in an IFRAME (<iframe src=consoleUrl(token)>), which cannot carry the apiClient Bearer header. The URL session token IS the workspace+node-scoped credential (session.verify returns the bound vmid). This matches DialogBrain's established file_token query-token pattern (src/api/auth.py, used for opening files in new tabs) and the existing AndroidClaimModal screenUrl iframe. Token has a 30-min TTL (revoked only on the next mint for the account, not on login-complete — see login_complete for why) and carries Referrer-Policy. Cannot proxy another workspace's node — the session-bound vmid ensures isolation.

get/api/channels/android/console/{session_token}/{path}

Request

  • Base URL: https://api.dialogbrain.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.dialogbrain.com/api/channels/android/console/{session_token}/{path}
  • Auth: none declared

Path parameters

session_tokenstring required
pathstring required

Response

Successful Response

unknown required

Changes

  • 77bef09a9209Revision changes
    • info

      api operation id console_proxy_api_channels_android_console__session_token___path__delete removed and replaced with console_proxy_api_channels_android_console__session_token___path__put

  • 8123eab4631aRevision changes
    • info

      api operation id console_proxy_api_channels_android_console__session_token___path__post removed and replaced with console_proxy_api_channels_android_console__session_token___path__delete