---
title: "Mint an ID token (ES256 by default, RS256 for a client registered for it where enabled; aud = client_id, nonce-bound, truthful obelisk.assurance) for ONE registered client whose registered origin equals the request Origin."
method: POST
path: "/fedcm/assertion"
tags: ["fedcm"]
---

# Mint an ID token (ES256 by default, RS256 for a client registered for it where enabled; aud = client_id, nonce-bound, truthful obelisk.assurance) for ONE registered client whose registered origin equals the request Origin.

`POST /fedcm/assertion`

## Request

- Base URL: `https://obeliskgate.com`
- URL: `https://obeliskgate.com/fedcm/assertion`
- Auth: API key in cookie `obelisk_session`

## Request body

- object
  - `account_id` unknown
  - `client_id` string: string
  - `nonce` string: string

## Response `200`

Success.

## Other responses

- `default`: Error — { ok:false, reason:<code>, message?:<human> } on failures; HTTP status mirrors it.

---

[API](https://skmtc.dev/obeliskgate/apis/obelisk-api.md) · [All operations](https://skmtc.dev/obeliskgate/apis/obelisk-api/llms.txt) · [OpenAPI document](https://skmtc.dev/obeliskgate/apis/obelisk-api/revisions/b99b2069699b?raw)