portal-auth

Exchange an admin "View as customer" hand-off ticket for a short-lived, READ-ONLY customer session. No DB lookup — the hand-off JWT is self-contained and signed by us; the resulting session carries impersonated_by, which the auth middleware treats as read-only.

post/api/portal/auth/assume

Request

  • Base URL
    https://api.riskcube.com (the document declares no server; this is the origin it was published from)
  • URL
    https://api.riskcube.com/api/portal/auth/assume
  • Auth
    none declared

Request body

tokenstring required

Response

Successful Response

unknown required

Changes