---
title: "Exchange a daemon token for a browser session"
method: POST
path: "/api/ui/session/login"
tags: ["web-session"]
---

# Exchange a daemon token for a browser session

`POST /api/ui/session/login`

## Request body

- WebLoginRequest
  - `$schema` string, uri — A URL to the JSON Schema for this object.
  - `token` string, required

## Response `200`

OK

- WebSessionCredentials
  - `$schema` string, uri — A URL to the JSON Schema for this object.
  - `capabilities` WebSessionCapabilities, required
    - `cancel_any_job` boolean, required
    - `cancel_review_job` boolean, required
    - `rerun_job` boolean, required
  - `csrf` string, required
  - `expires_at` string, date-time, required
  - `session` string, required

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `415` — Unsupported Media Type
- `429` — Too Many Requests

## Changes

- **2026-08-16** `da030fad394f` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/kenn-io/apis/roborev/changes/api/ui/session/login/post.md)

---

[API](https://skmtc.dev/kenn-io/apis/roborev.md) · [All operations](https://skmtc.dev/kenn-io/apis/roborev/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/kenn-io/roborev/revisions/0dfdca81e88d/schema)