Browse the api reference

SSO Token Exchange

post/v1/auth/sso-exchange

Step 2 of 3. Exchanges the SSO token for a short-lived session ID. Avoids passing tokens in redirect URLs.

Authentication

This operation does not require an API key.

Request body

Required, application/json.

Field	Type	Description
`token`required	string	Temporary SSO token
`target_app`required	string	Target application identifier
`return_url`optional	string	Optional return URL after authentication
`browser_nonce_hash`optional	string	SHA-256 (hex) of a nonce the target app minted in the browser that is signing in. Completion must present the nonce, so the handoff cannot be redeemed by any other browser; a session exchanged without one cannot be completed. Constraints: matches `^[0-9a-f]{64}$`

Example request

curl

curl -X POST "https://api.robosystems.ai/v1/auth/sso-exchange" \
  -H "Content-Type: application/json" \
  -d '{
  "token": "string",
  "target_app": "string"
}'

Responses

200 Successful Response

Field	Type	Description
`session_id`required	string	Temporary session ID for secure handoff
`redirect_url`required	string	URL to redirect to for authentication
`expires_at`required	string (date-time)	Session expiration time

Status	Meaning
400	Invalid request
422	Validation Error
429	Rate limit exceeded
500	Internal server error