Sol App (internal)

Claim Anon After Oauth

Moves this browser's anonymous chats to the signed-in account after an OAuth round trip. Internal (proxy token): the only caller is apps/sol's POST /api/auth/claim, which is same-origin, requires a session and sends THAT session's user id, never one from the browser. The anon id no longer travels in the start URL, where a crafted link could plant someone else's chats in the victim's history (security review L1).

post/api/sol-app/auth/claim-anon

Request

  • Base URL: https://api.ruzora.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.ruzora.com/api/sol-app/auth/claim-anon
  • Auth: none declared

Request body

user_idstring required
anon_idstring required

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.