认证

Issue Sso Ticket

Web 端用自己 OAuth bearer 换取一次性 SSO 票据(60s 有效,jti 防重放)。

票据仅用于跨域会话桥(web token 是 localStorage,授权服务器读不到), 本身不携带任何 OAuth 凭据——MCP 验票后只拿到 user_id + role, 再在授权服务器本地建立它自己的会话。

post/api/v1/auth/sso-ticket

Request

  • Base URL: https://api.hipowork.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.hipowork.com/api/v1/auth/sso-ticket
  • Auth: OAuth 2 (password, token URL /api/v1/auth/oauth/token)

Response

Successful Response

ticketstring required
expires_ininteger required

Changes

No recorded changes to this operation across all 1 revision of this API.