AUTH

Dippr Handoff Token

Changed on

Mint the short-lived ticket /connect hands to Dippr for a current Owner.

It proves who the user is to the Altimate IdP and nothing more: only /auth/dippr/redeem accepts it, for identity claims. Unlike connect-token it leaves pending_social_jti alone, so it never cancels a CLI or social sign-in in flight; the IdP enforces single use.

post/auth/dippr/handoff-token

Request

Headers

x-tenantstring

Response

Successful Response

object required

Changes