Sign in
partner-oauth

Authenticate the patient within an authorization transaction

Credentials are verified by MNT and the patient is bound to the transaction server-side. No first-party RxFood token is issued to the browser. The transaction secret is rotated on success.

post/oauth/partner/transaction/login

Request body

localestring
otp_tokenstring
passwordstring required
transaction_idstring required
usernamestring required

Response

Authenticated; returns a rotated transaction_id plus the transaction view

authenticatedboolean
consent_versionstring
expires_atstring
mfa_pendingboolean
redirect_uri_hoststring nullable
scopesstring[]
transaction_idstring

Rotated transaction secret, returned by /transaction and /transaction/login. Store it and use it for the next call; the one you presented is dead on return.

Changes