Sign in
auth

Verify a Turnstile token with Cloudflare, then mint a free-tier session JWT.

Changed on
post/auth/session

Request

  • The document declares no server URL.
  • Auth: none required

Request body

tokenstring required

Turnstile token produced by the SPA widget.

Response

Session JWT minted

expires_ininteger required

Seconds until token expires.

tokenstring required

Free-tier session JWT, sent back as Authorization: Bearer <token>.

Changes