Browse the API reference

SSO Token Exchange

post/v1/auth/sso-exchange

Part of Auth.

Step 2 of 3. Exchanges the SSO token for a short-lived session ID. Avoids passing tokens in redirect URLs.

Authentication

This operation does not require an API key.

Request body

Required, application/json.

Field	Type	Description
`token`required	string	Temporary SSO token
`target_app`required	string	Target application identifier
`return_url`optional	string	Optional return URL after authentication

Example request

curl

curl -X POST "https://api.robosystems.ai/v1/auth/sso-exchange" \
  -H "Content-Type: application/json" \
  -d '{
  "token": "string",
  "target_app": "string"
}'

Responses

200 Successful Response

Field	Type	Description
`session_id`required	string	Temporary session ID for secure handoff
`redirect_url`required	string	URL to redirect to for authentication
`expires_at`required	string (date-time)	Session expiration time

Status	Meaning
400	Invalid request
422	Validation Error
429	Rate limit exceeded
500	Internal server error