---
title: "Prepare the browser for global sign-in."
method: GET
path: "/api/auth/bootstrap"
---

# Prepare the browser for global sign-in.

`GET /api/auth/bootstrap`

## Request

- Base URL: `https://okfindex.com`
- URL: `https://okfindex.com/api/auth/bootstrap`
- Auth: none required

Sets a host-only HttpOnly browser cookie. CSRF is bound to the current session. No CORS.
Returns: { csrf, context }

## Response `200`

{ csrf, context }

- object
  - `csrf` string, required: X-CSRF-Token
  - `context` string, required: Opaque view context, also in X-MM-Context; not a credential / contexto opaco da vista, não é credencial.

## Other responses

- `400`: invalid_request
- `403`: invalid_origin / invalid_csrf
- `503`: auth_unavailable: a sessão anterior é preservada / the previous session is preserved

---

[API](https://skmtc.dev/okfindex/apis/okf-index.md) · [All operations](https://skmtc.dev/okfindex/apis/okf-index/llms.txt) · [OpenAPI document](https://skmtc.dev/okfindex/apis/okf-index/revisions/4b13ca3c739f?raw)