ORory
frontend

Exchange Session Token

Changed on
get/sessions/token-exchange

Request

  • Base URL
    / (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /sessions/token-exchange
  • Auth
    none declared

Query parameters

init_codestring required

The part of the code return when initializing the flow.

return_to_codestring required

The part of the code returned by the return_to URL.

Response

successfulNativeLogin

continue_withContinueWith[]

Contains a list of actions, that could follow this flow

It can, for example, this will contain a reference to the verification flow, created as part of the user's registration or the token of the session.

session_tokenstring

The Session Token

A session token is equivalent to a session cookie, but it can be sent in the HTTP Authorization Header:

Authorization: bearer ${session-token}

The session token is only issued for API flows, not for Browser flows!

Example response

{
  "session": {
    "identity": {
      "verifiable_addresses": [
        {
          "created_at": "2014-01-01T23:28:56.782Z",
          "updated_at": "2014-01-01T23:28:56.782Z",
          "verified": true,
          "via": "email"
        }
      ]
    }
  }
}

Changes