SIsixminute
auth

Exchange a one-time code for a session, unauthenticated

Redeems the code with WorkOS and returns exactly what the device's own PKCE exchange returns, so the daemon stores it through one code path. A wrong code is a 422 invalid-code, an expired one a 422 code-expired, too many attempts a 429 rate-limited. A person in more than one organisation is signed in to their one firm, never the operators organisation; none is a 403 no-firm and more than one a 403 choose-firm.

post/v1/auth/email/verify

Request

  • Base URL
    https://api.sixminute.ai (the document declares no server; this is the origin it was published from)
  • Auth
    none declared

Request body

emailstring email required
codestring required

Response

The session: the tokens and the user.

access_tokenstring required
refresh_tokenstring required
organization_idstring nullable

Changes

No recorded changes to this operation across all 2 revisions of this API.