authentication

Mint a Try It session key

Mint (or rotate) the in-app "Try It" playground key for this user.

The dashboard/landing Try It panel calls this with the logged-in user's Cognito JWT, so the panel never depends on a copy-once raw key stashed in the browser. Each call revokes the prior playground key and returns a fresh raw value.

Abuse controls (the playground adds NO new spend budget):

  • Minting is capped per user (session_key_mint_per_hour).
  • The key is excluded from the per-tier key cap and hidden from GET /keys.
  • Analyses made with it consume the user's normal monthly quota and are rate-limited per user_id at playground_rate_limit_per_hour so re-minting cannot reset the hourly window (enforced in deps.py).
post/auth/session-key

Request

  • Base URL: https://api.whoisgeni.us (the document declares no server; this is the origin it was published from)
  • URL: https://api.whoisgeni.us/auth/session-key
  • Auth: HTTP bearer

Response

Short-lived playground API key (raw value, shown each call)

metaobject nullable

Example response

{
  "error": {
    "code": "JOB_NOT_FOUND",
    "message": "No job found with the given ID."
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.