---
title: "Validate Sso Ticket"
method: POST
path: "/api/v1/auth/sso/validate"
tags: ["认证"]
---

# Validate Sso Ticket

`POST /api/v1/auth/sso/validate`

## Request

- Base URL: `https://api.hipowork.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.hipowork.com/api/v1/auth/sso/validate`
- Auth: none declared

由受信任的 MCP 授权服务器验证一次性票据（双因素：内部密钥 + HMAC 签名）。

返回 user_id/role/jti。MCP 侧对 jti 做一次性消费（防重放）。

## Headers

- `x-mcp-internal-secret` string, nullable

## Request body

- SsoTicketBody
  - `ticket` string, required

## Response `200`

Successful Response

- SsoValidateResponse
  - `user_id` string, required
  - `role` string, required
  - `jti` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/hipowork/apis/hipo-work-ai-recruitment-platform.md) · [All operations](https://skmtc.dev/hipowork/apis/hipo-work-ai-recruitment-platform/llms.txt) · [OpenAPI document](https://skmtc.dev/hipowork/apis/hipo-work-ai-recruitment-platform/revisions/de21a6c57062?raw)