---
title: "Exchange one time token for session"
method: POST
path: "/token"
tags: ["Token"]
deprecated: true
---

# Exchange one time token for session

`POST /token`

> **Deprecated.**

Provide a one time token (e.g. obtained through the [thirdparty callback](#tag/Third-Party/operation/thirdPartyCallback)) to retrieve a session JWT as cookie
and/or via `X-Auth-Token` header.

## Request body

- object
  - `value` string, base64url

## Response `200`

Successful token exchange

- object
  - `user_id` string, uuid4

## Other responses

- `400` — Bad Request
- `404` — Not Found
- `422` — Unprocessable Entity
- `429` — Too Many Requests

---

[API](https://skmtc.dev/hanko/apis/hanko-admin-api.md) · [All operations](https://skmtc.dev/hanko/apis/hanko-admin-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hanko/hanko-admin-api/revisions/d22a127b0978/schema)