auth

Entra Assurance Resume

Finish the sign-in the ceremony held open, and issue the session.

Unlike the callback, this answers JSON rather than a redirect: the browser is already on the dashboard's waiting page by now, so there is nowhere to send it and no fragment to hide a token pair in. It reaches AuthService only from mailbox_verified, which only :func:entra_assurance_verify can produce.

post/v1/auth/entra/email-assurance/resume

Request

  • Base URL: https://api.patricia.app (the document declares no server; this is the origin it was published from)
  • URL: https://api.patricia.app/v1/auth/entra/email-assurance/resume
  • Auth: none declared

Request body

resume_tokenstring required
first_timeboolean

Response

Successful Response

access_tokenstring required
refresh_tokenstring required
token_typestring
expires_ininteger required
landing_hint'pending_invitation' | 'diverted_unknown_workspace'

A non-authorization hint explaining WHY a session landed where it did.

The dashboard reads it to show the right next step instead of a bare landing. It never grants access: the token's tenant claim (or its absence) is the sole authority. Two values, and they differ in whether the session has a workspace at all:

PENDING_INVITATION lands TENANT-LESS — a returning user with at least one pending invitation and no active available home. It is NOT "only pending memberships": the branch is chosen on has_pending before the deactivated/unavailable fallback, so a user holding a pending invite alongside deactivated or unavailable ones lands here too. The SSO guard declines to mint an empty duplicate tenant, and the hint points them at accepting the invite / signing in from the connected workspace.

DIVERTED_UNKNOWN_WORKSPACE lands WITH an active workspace — a returning user who signed in from a chat workspace Patricia does not know. The guard diverts them to their existing primary workspace rather than minting a second one, and the hint is what lets the dashboard say so and offer a deliberate way to create a separate workspace instead of failing silently.

decision_keystring nullable

Changes

No recorded changes to this operation across all 1 revision of this API.