认证

Validate Sso Ticket

由受信任的 MCP 授权服务器验证一次性票据（双因素：内部密钥 + HMAC 签名）。

返回 user_id/role/jti。MCP 侧对 jti 做一次性消费（防重放）。

post/api/v1/auth/sso/validate

Request

  • Base URL: https://api.hipowork.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.hipowork.com/api/v1/auth/sso/validate
  • Auth: none declared

Headers

x-mcp-internal-secretstring nullable

Request body

ticketstring required

Response

Successful Response

user_idstring required
rolestring required
jtistring required

Changes

No recorded changes to this operation across all 1 revision of this API.