Auth - session handoff

Create Authorize Handoff Code

Changed on

A code standing for the caller's session on the backend's /oauth/authorize page, for 60 seconds and one page load, in this browser only: the response sets an HttpOnly cookie with the code's verifier, which the page needs. A forwarded authorize URL shows another admin no consent screen under the caller's identity. Whether the account may authorize anything is that page's decision (admins only).

post/auth/authorize-handoff-code

Request

  • Base URL: https://api.excellence-ai.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.excellence-ai.com/auth/authorize-handoff-code
  • Auth: OAuth 2 (password, token URL api/login)

Response

Successful Response

codestring required
expires_ininteger required

Changes