previews

Refuse every token issued for this preview so far, and return a new one.

post/v1/sandboxes/{id}/previews/{port}:rotate

Request

  • Base URL: https://api.withruntime.com
  • URL: https://api.withruntime.com/v1/sandboxes/{id}/previews/{port}:rotate
  • Auth: HTTP bearer

Path parameters

idstring required

Resource identifier (UUID).

portstring required

The previewed port.

Headers

Idempotency-Keystring

Replaying the same key with the same request within 24 hours returns the first result and never repeats the effect. A refusal is not kept: a request refused before it ran (no_capacity, busy, a limit) runs afresh when sent again with its key. The SDKs send one automatically; the server makes one when absent and returns it in the idempotency-key response header.

Response

Success

idstring
sandboxIdstring
portinteger
visibilitystring
urlstring

The address. A private preview also needs the token.

tokenstring nullable

Private previews: a token signed for this answer. Every create and read signs its own, each with its own tokenExpiresAt (a day unless ttlSeconds or expiresAt asks otherwise); tokens signed before keep working until their own expiry or a rotate. Null for a key that cannot run commands in the sandbox, such as a read-only key.

tokenExpiresAtstring date-time nullable

When this answer's token stops working. It is not stored on the preview: another read signs another token with its own expiry, and does not shorten or extend this one.

urlWithTokenstring nullable

Private previews: a link that carries the token once, for a browser.

disabledboolean

Turned off by Runtime after a report. Contact support.

embedOriginsstring[] nullable

The sites that may show it in an iframe; null for any site.

createdAtstring date-time

Changes

No recorded changes to this operation across all 1 revision of this API.