auth

Exchange Handoff Code

Exchange a one-time OAuth handoff code for a bearer token.

The mobile app receives the handoff code via deep link and POSTs it here over HTTPS. The code is single-use and short-TTL; a reused or expired code is rejected. On success a fresh opaque session token is issued — the same server-side revocable credential as the web cookie.

post/api/auth/token/exchange

Request

  • Base URL: https://api.retirementlab.app (the document declares no server; this is the origin it was published from)
  • URL: https://api.retirementlab.app/api/auth/token/exchange
  • Auth: none declared

Request body

codestring required

Response

Successful Response

auth_tokenstring required
expires_atstring date-time required

Changes

No recorded changes to this operation across all 1 revision of this API.