---
title: "Exchange cloud provider authorization code for admin session"
method: POST
path: "/api/auth/admin/sessions/exchange"
tags: ["Admin"]
---

# Exchange cloud provider authorization code for admin session

`POST /api/auth/admin/sessions/exchange`

Verifies an authorization code/JWT from from Insforge Cloud platform and issues an internal admin session token with project_admin role

## Request body

- object
  - `code` string, required — Authorization code or JWT from the Insforge

## Response `200`

Cloud authorization verified, admin session created

- object
  - `projectAdmin` ProjectAdminResponse
    - `subject` string, required
    - `username` string, required
  - `accessToken` string — Internal JWT for admin authentication
  - `csrfToken` string — CSRF token for `/api/auth/admin/refresh`

## Other responses

- `400` — Invalid authorization code or JWT verification failed

---

[API](https://skmtc.net/insforge/apis/insforge-authentication-api.md) · [All operations](https://skmtc.net/insforge/apis/insforge-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/insforge/insforge-authentication-api/versions/a935bb49f932/schema)