portal-auth
Assume
Changed onExchange an admin "View as customer" hand-off ticket for a short-lived, READ-ONLY customer session. No DB lookup — the hand-off JWT is self-contained and signed by us; the resulting session carries impersonated_by, which the auth middleware treats as read-only.
post/api/portal/auth/assume
Request
- Base URLhttps://api.riskcube.com (the document declares no server; this is the origin it was published from)
- URLhttps://api.riskcube.com/api/portal/auth/assume
- Authnone declared
Request body
Response
Successful Response
unknown required
Changes
- info
endpoint added
- info