---
title: "Claim Anon After Oauth"
method: POST
path: "/api/sol-app/auth/claim-anon"
tags: ["Sol App (internal)"]
---

# Claim Anon After Oauth

`POST /api/sol-app/auth/claim-anon`

## Request

- Base URL: `https://api.ruzora.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.ruzora.com/api/sol-app/auth/claim-anon`
- Auth: none declared

Moves this browser's anonymous chats to the signed-in account after an
OAuth round trip. Internal (proxy token): the only caller is apps/sol's
POST /api/auth/claim, which is same-origin, requires a session and sends
THAT session's user id, never one from the browser. The anon id no
longer travels in the start URL, where a crafted link could plant
someone else's chats in the victim's history (security review L1).

## Request body

- ClaimAnonIn
  - `user_id` string, required
  - `anon_id` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/ruzora/apis/ruzora-candidate-crm-api.md) · [All operations](https://skmtc.dev/ruzora/apis/ruzora-candidate-crm-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ruzora/apis/ruzora-candidate-crm-api/revisions/f9b8223f3ac4?raw)