Sign in
latestOpenAPI 3.1.0Proprietary2026-08-1095216168.4 KB

db81a447bba9

Account

Sign in

Step 3 of the OAuth flow. Trades the intent ID+token (received from the IdP callback) for an authenticated session. Sets the session cookie and returns a csrf_token that must be sent on all subsequent state-changing requests via x-csrf-token header.

post/account/sign_in

Request body

idstring required
source'google' | 'github' | 'microsoft'
tokenstring required

Response

Authenticated session. The csrf_token must be echoed back as X-CSRF-Token on writes

csrf_tokenstring required
emailstring required
expirystring date-time required

Example response

{
  "email": "alice@laserdata.com"
}