Sandbox version
For experimental use only. Proceed with caution.
auth
Exchange an API key for a JWT, or start interactive sign-in
post
/auth/jwt
operationId: auth-jwt

Public proxy for core's JWT issuance flow. When the body includes apiKey, returns a signed JWT directly. When no apiKey is supplied, returns a one-time token plus an authUrl the caller redirects the user to so they can complete sign-in in the auth app. Per-IP rate-limited; no JWT required.

Try it now
Response · 200
{
  "jwt": "string",
  "audience": "string",
  "expiresAt": "string"
}
Request Body
application/json
required
FieldTypeDescription
apiKey
string
Caller API key. When present, the proxy exchanges it for a JWT via core. When absent, the proxy initiates an interactive (OTT) sign-in instead.
Example
Json
{
  "apiKey": "string"
}
Responses
200
application/json
Successful response
Example
Json
{
  "jwt": "string",
  "audience": "string",
  "expiresAt": "string"
}
400
application/json
Invalid input data
FieldTypeDescription
message
string
The error message
code
string
The error code
issues
object[]
An array of issues that were responsible for the error
issues[].message
string
Example
Json
{
  "code": "BAD_REQUEST",
  "message": "Invalid input data",
  "issues": []
}
500
application/json
Internal server error
FieldTypeDescription
message
string
The error message
code
string
The error code
issues
object[]
An array of issues that were responsible for the error
issues[].message
string
Example
Json
{
  "code": "INTERNAL_SERVER_ERROR",
  "message": "Internal server error",
  "issues": []
}