Sign in
banking.v1.AuthService

IssueUserToken

Changed on

Mint the money-plane token pair for an already-identified user, keyed by their concierge user id. Service-to-service: authenticated by the shared issuance token in the authorization metadata (Bearer), never a user token. The user must already exist locally (provisioned by the cross-plane bridge) and not be frozen.

post/banking.v1.AuthService/IssueUserToken

Request

  • The document declares no server URL.
  • Auth: none required

Headers

Connect-Protocol-Version1 required

Define the version of the Connect protocol

Connect-Timeout-Msnumber

Define the timeout, in ms

Request body

concierge_user_idstring

The concierge canonical user id (a UUID) of the already-authenticated user. Banking maps it to its local mirror row (provisioned by the cross-plane bridge) and mints the money-plane pair for that user. Banking never sees Google's sub — the bridge carries it; the BFF carries this concierge id, which it has from the concierge sign-in.

user_agentstring

Device metadata captured by the BFF at sign-in, stored on the refresh-token family for the "sessions & devices" surface. Best-effort, free-form.

ipstring

Response

Success

access_tokenstring
refresh_tokenstring

Changes

  • da61ad3e1dd8Revision changes
    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

  • c8baad1cc6c0Revision changes
    • info

      added the optional property / to the response with the status