Auth: SSO

Complete SSO Authentication

Step 3 of 3. Exchanges the session ID for a full JWT token. Called by the target app after redirect.

post/v1/auth/sso-complete

Request

  • Base URL: https://api.robosystems.ai (the document declares no server; this is the origin it was published from)
  • URL: https://api.robosystems.ai/v1/auth/sso-complete
  • Auth: none declared

Request body

session_idstring required

Temporary session ID from secure handoff

Response

Successful Response

userobject required

User information

orgobject nullable

Organization information (personal org created automatically on registration)

messagestring required

Success message

status'authenticated' | 'mfa_required' | 'mfa_enrollment_required'

Login flow state: authenticated (token present), or a passkey MFA step is required before a session is issued (mfa_token present)

mfa_tokenstring nullable

Short-lived token authorizing the MFA second step or forced enrollment; present only when status is not 'authenticated'

tokenstring nullable

JWT authentication token (optional for cookie-based auth)

expires_ininteger nullable

Token expiry time in seconds from now

refresh_thresholdinteger nullable

Recommended refresh threshold in seconds before expiry

Changes

No recorded changes to this operation across all 1 revision of this API.