Mint a one-time login token
POST/api/v1/security/login-token/
Exchanges a caller-supplied proof of identity for an opaque, single-use token that GET on this same path trades for a session cookie. Intended to be called server-to-server by a trusted parent application so the underlying credential never reaches the browser. The LOGIN_TOKEN_IDENTITY_RESOLVER hook decides what counts as proof.
Responses
- 200
- 401
- 404
- 500
The minted token and its expiry
Unauthorized
Not found
Fatal error