SIsixminute
auth

The page redeems the session hand-off's one-time code for its own session

The code the daemon was answered at POST /v1/devices/session-handoff, handed over by the shell. Requires X-Six-Minute-Page: 1 from an allowed Origin, and is limited per caller. Works once per device, within its minute, while the device still holds the credential the exchange issued and is not revoked; anything else is 401. The refresh token is kept in the http-only cookie and is not in the answer, except for a page in storage mode (storage: true) on an environment with no custom authentication domain; asked elsewhere that is 403. Deleted at phase 7.

post/v1/auth/page/session-handoff

Request

  • Base URL
    https://api.sixminute.ai (the document declares no server; this is the origin it was published from)
  • Auth
    none declared

Request body

codestring required
storageboolean

Response

The session; the refresh token is in the http-only cookie, or here for a page in storage mode.

access_tokenstring required
organization_idstring nullable
refresh_tokenstring

Changes

No recorded changes to this operation across all 2 revisions of this API.