---
title: "POST /sessions/authorize"
method: POST
path: "/sessions/authorize"
tags: ["Sessions"]
---

# POST /sessions/authorize

`POST /sessions/authorize`

## Request body

- AuthorizeSessionRequest
  - `nonce` string, required
  - `expires_at` string, nullable
  - `permissions` string[], nullable
  - `rules` AccessRule[], nullable
    - `description` string, nullable
    - `priority` integer, nullable
    - `container` string, nullable
    - `transform` string, nullable
    - `conditions` Condition[], nullable
      - `attribute` string, nullable
      - `operator` string, nullable
      - `value` string, nullable
    - `permissions` string[], nullable

## Response `200`

Success

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `409` — Conflict

---

[API](https://skmtc.net/basistheory/apis/basis-theory-api.md) · [All operations](https://skmtc.net/basistheory/apis/basis-theory-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/basistheory/basis-theory-api/revisions/cbb8e098b560/schema)