Desktop Exchange

Redemption leg, called by the desktop app itself — unauthenticated like the other /v1/auth/ sign-in endpoints (all of which the rate-limit middleware skips). One generic failure message on purpose: the caller learns nothing about why a code was refused. The session is a fresh one, not a hand-off of the browser's — signing out of the browser must not sign out the desktop app.

post/v1/auth/desktop/exchange

Request

  • Base URL: https://api.app.membase.ai (the document declares no server; this is the origin it was published from)
  • URL: https://api.app.membase.ai/v1/auth/desktop/exchange
  • Auth: none declared

Request body

codestring required
code_verifierstring required

Response

Successful Response

account_idstring required
methodstring required
expires_atstring required
csrf_tokenstring required
rolestring nullable
emailstring nullable
display_namestring nullable
walletstring nullable
session_tokenstring required

Changes

No recorded changes to this operation across all 1 revision of this API.