canonical

Mint a scoped browser token

Exchange backend authority for a short-lived browser token bound to one subject and exact registered origin.

post/api/v1/client-tokens

Request

Base URL
https://app.graypass.org (the document declares no server; this is the origin it was published from)
URL
https://app.graypass.org/api/v1/client-tokens
Auth
HTTP bearer

originstring required

Exact browser origin including scheme, hostname and non-default port. It must be registered for the tenant.

subjectstring required

Pseudonymous subject identifier in the authenticated tenant and environment.

ttl_secondsinteger

Browser-token lifetime in seconds; default 900, permitted range 60-3600.

New browser token, exact origin, lifetime and Unix-seconds expiry.

client_tokenstring required

Short-lived bearer token for the selected subject and origin. Keep it out of URLs, logs and persistent browser storage.

expires_atnumber required

Token expiry as Unix time in seconds, which differs from the ISO timestamps used by most resource records.

originstring required

Exact browser origin including scheme, hostname and non-default port. It must be registered for the tenant.

ttl_secondsinteger required

Browser-token lifetime in seconds; default 900, permitted range 60-3600.

No recorded changes to this operation across all 1 revision of this API.